AIKIDO-2024-10156

pybind11 is vulnerable to Use After Free

30

Low

pybind11

AIKIDO-2024-10156: pybind11 is vulnerable to Use After Free in versions 0.1.0 - 2.12.0.

Use After Free
Vuln in 0.1.0 - 2.12.0
Fixed in 2.13.0
No CVE available
TL;DR

Affected versions of this package are vulnerable to a Use After Free vulnerability due to a reference count bug.

Who does this affect?

You're affected if you are using a vulnerable version of the package.

How can it be fixed?

Upgrade pybind11 to a patch version.

Are you
to these issues?
Connect your GitHub, GitLab, Bitbucket or Azure DevOps account to start scanning your repos for free.
Start For Free
Your data won't be shared · Read-only access
Logo
© 2024 Aikido Security BV | BE0792914919
🇪🇺 Grauwpoort 1, 9000 Ghent, Belgium
🇺🇸 95 Third St, 2nd Fl, San Francisco, CA 94103, US