High severity8.6NVD Advisory· Published Feb 29, 2024· Updated Jun 17, 2026
CVE-2024-25713
CVE-2024-25713
Description
yyjson through 0.8.0 has a double free, leading to remote code execution in some cases, because the pool_free function lacks loop checks. (pool_free is part of the pool series allocator, along with pool_malloc and pool_realloc.)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/ibireme/yyjsonSwiftURL | < 0.9.0 | 0.9.0 |
Affected products
6cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
- yyjson/yyjsondescription
Patches
Vulnerability mechanics
References
16- github.com/ibireme/yyjson/security/advisories/GHSA-q4m7-9pcm-fpxhnvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-whx6-m9j4-w2m2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-25713ghsaADVISORY
- github.com/ibireme/yyjson/commit/0eca326fe57aeeb866e6f04c9ef9ea9f8343157eghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KQ67T4R7QEWURW5NMCCVLTBASL4ECHEghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KQ67T4R7QEWURW5NMCCVLTBASL4ECHE/nvdMailing List
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NNICQVIF7BRYFWYRL3HPVAJIPXN4OVTXghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NNICQVIF7BRYFWYRL3HPVAJIPXN4OVTX/nvdMailing List
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TKQPEREDUDKGYJMFNFDQVYCVLWDRO2Y2ghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TKQPEREDUDKGYJMFNFDQVYCVLWDRO2Y2/nvdMailing List
- lists.fedoraproject.org/archives/list/[email protected]/message/6KQ67T4R7QEWURW5NMCCVLTBASL4ECHEghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/NNICQVIF7BRYFWYRL3HPVAJIPXN4OVTXghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/TKQPEREDUDKGYJMFNFDQVYCVLWDRO2Y2ghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/6KQ67T4R7QEWURW5NMCCVLTBASL4ECHE/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/NNICQVIF7BRYFWYRL3HPVAJIPXN4OVTX/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/TKQPEREDUDKGYJMFNFDQVYCVLWDRO2Y2/nvd
News mentions
0No linked articles in our index yet.