OSV-2026-1511
Heap-use-after-free in lj_cconv_ct_ct
No scoreFix available
OSV-2026-1511 is a vulnerability with no CVSS score yet in tarantool, published November 8, 2026. No source lists public exploit code. A source reports a fix.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582556839
Crash type: Heap-use-after-free READ 4
Crash state:
lj_cconv_ct_ct
lj_cconv_tv_ct
lj_cf_ffi_meta___index
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tarantoolOSS-Fuzz | Commit ranges | Not evaluated |
Not evaluated means the source gave git commits or a range we can't read, so we can't tell which releases are affected. A fixed version beside it is the source’s own claim.
What each source reports
OSVNo score
Heap-use-after-free in lj_cconv_ct_ct
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=582556839
Crash type: Heap-use-after-free READ 4
Crash state:
lj_cconv_ct_ct
lj_cconv_tv_ct
lj_cf_ffi_meta___index
- Record
OSV-2026-1511- Updated
- 2026-11-08
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.