cve/2021/CVE-2021-39176.md
2025-09-29 21:09:30 +02:00

18 lines
854 B
Markdown

### [CVE-2021-39176](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39176)
![](https://img.shields.io/static/v1?label=Product&message=detect-character-encoding&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%200.3.1%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-401%3A%20Missing%20Release%20of%20Memory%20after%20Effective%20Lifetime&color=brightgreen)
### Description
detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1.
### POC
#### Reference
- https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj
#### Github
No PoCs found on GitHub currently.