CVE-2021-28905

Publication date

2021-05-20 18:36:35

Family

mitre

State

PUBLISHED

Description

In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module cant be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617).