CVE-2017-1000172
CriticalSummary
In Creolabs Gravity version 1.0, a Use-After-Free vulnerability exists that may lead to code execution. The issue involves the 'sublexer' pointer being freed and then accessed in the code, resulting in unsafe memory access.
Risk Assessment
The organization may be exposed to remote code execution, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and conduct a security audit of the application.
Original NVD description (English source)
Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed. Line 542 of gravity_lexer.c. 'lexer' is being used to access a variable but 'lexer' has already been freed, creating a Heap Use-After-Free condition.