← All advisories

Critical severity9.8NVD Advisory· Published Jul 1, 2021· Updated Jun 17, 2026

CVE-2021-36088

CVE-2021-36088

Description

Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Treasuredata/Fluent Bit
cpe:2.3:a:treasuredata:fluent_bit:*:*:*:*:*:*:*:*
Range: >=1.7.0,<=1.7.4
Fluent Bit/Fluent Bitdescription
Fluent Bit/Fluent Bitllm-fuzzy
Range: 1.7.0 - 1.7.4
osv-coords
pkg:bitnami/fluent-bit
Range: >= 1.7.0, < 1.7.5

Patches

Vulnerability mechanics

References

4

github.com/fluent/fluent-bit/commit/22346a74c07ceb90296be872be2d53eb92252a54nvdPatchThird Party Advisory
github.com/fluent/fluent-bit/pull/3453nvdPatchThird Party Advisory
bugs.chromium.org/p/oss-fuzz/issues/detailnvdExploitPatchThird Party Advisory
github.com/google/oss-fuzz-vulns/blob/main/vulns/fluent-bit/OSV-2021-702.yamlnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.