A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.

A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.

libyang: invalid memory access in resolve_feature_value() when a if-feature is used inside a bit libyang: invalid memory access when if-feature statement is used inside a list key node libyang: double-free in function yyparse() when empty description is used libyang: double-free in yyparse() when a type statement is used in a notification statement libyang: stack-overflow when parsing yang files with self-referential union types libyang: heap-based buffer over-read in function lys_type_free() due to malformed pattern libyang: double-free in yyparse() when organization field is not terminated libyang: NULL pointer dereference in function lys_extension_instances_free()

Affected: Ubuntu:20.04:LTS: libyang

A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.