medium6.5
CVE-2021-39432
diplib Double Free
Impact
diplib v3.0.0 is vulnerable to Double Free.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | diplib | < 3.1.0 | 3.1.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Diplib | Diplib | Version 3.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/DIPlib/diplib/commit/8b9a2670ce66ff2fd5addf592f7825e1f5adb5b5
- https://github.com/DIPlib/diplib/issues/80
- https://github.com/advisories/GHSA-xf2w-5673-h6ww
- https://nvd.nist.gov/vuln/detail/CVE-2021-39432
- https://github.com/pypa/advisory-database/tree/main/vulns/diplib/PYSEC-2022-43131.yaml