Use-After-Free Vulnerability in Busybox's Awk Applet

CVE-2021-42379

What is CVE-2021-42379?

A use-after-free vulnerability exists within Busybox's awk applet, specifically triggered during the processing of specially crafted awk patterns in the next_input_file function. This flaw can potentially lead to a denial of service condition and may allow for code execution, posing a significant risk if exploited effectively. Users of affected versions should be vigilant and apply updates to mitigate risks.

References