CVE-2021-20204P3CRITICALCVSS 9.8fixed in libgetdata 0.10.0-10 (bookworm)2021
CVE-2021-20204 [CRITICAL] CVE-2021-20204: libgetdata - A heap memory corruption problem (use after free) can be triggered in libgetdata...
A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades the confidentiality, integrity and availability of third-party software that uses libgetdata as a library. This vulnerability may lead to arbitrary code execution or privilege escalation depending on inp
debian