A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.

A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.

libyang: invalid memory access in resolve_feature_value() when a if-feature is used inside a bit libyang: invalid memory access when if-feature statement is used inside a list key node libyang: double-free in function yyparse() when empty description is used libyang: double-free in yyparse() when a type statement is used in a notification statement libyang: stack-overflow when parsing yang files with self-referential union types libyang: heap-based buffer over-read in function lys_type_free() due to malformed pattern libyang: double-free in yyparse() when organization field is not terminated libyang: NULL pointer dereference in function lys_extension_instances_free()

Affected: Ubuntu:20.04:LTS: libyang

A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.