CVE-2021-33796CWE-416

In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service

Critical · published July 7, 2023

CVSS v3.1
10.0
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

🚨 A use-after-free flaw in MuJS before version 1.1.2 could bring services to their knees — like a juggler dropping all their balls at once! 🔥 Think of it as a restaurant kitchen where a chef accidentally uses a dish that was already thrown away — the result could spoil the entire meal, leading to a chaotic dining experience. Here, the flaw can lead to a denial of service, much like a surprise kitchen shutdown during a busy dinner rush! If exploited, this vulnerability could lead to a complete denial of service, meaning your applications might crash unexpectedly, leaving users frustrated and unable to access services. It’s absolutely devastating for reliability and could tarnish your reputation overnight!

Put simply

Think of it as a restaurant kitchen where a chef accidentally uses a dish that was already thrown away — the result could spoil the entire meal, leading to a chaotic dining experience. Here, the flaw can lead to a denial of service, much like a surprise kitchen shutdown during a busy dinner rush! This use-after-free vulnerability arises when the regexp source property accesses memory that has already been freed, potentially leading to application crashes or other unstable behaviors.

What to do

If exploited, this vulnerability could lead to a complete denial of service, meaning your applications might crash unexpectedly, leaving users frustrated and unable to access services. It’s absolutely devastating for reliability and could tarnish your reputation overnight! To protect your systems, patch MuJS immediately to version 1.1.2 or higher. Ensure that all your projects using this library are updated swiftly to prevent any potential downtime. You’ve got this! Stay ahead of the game by following these steps, and you’ll have your system locked down in no time! 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00713 · 53.1th percentile
Weakness
CWE-416 · Use After Free
Published
2023-07-07T17:55Z
EPSS history
Timeline
  • 07 JUL 17:55Z
    In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service
    cvelistv5