{"id":"OSV-2021-503","aliases":[],"status":"published","title":"Use-after-poison in std::__1::unique_ptr\u003cSkSL::Expression, std::__1::default_delete\u003cSkSL::Expression","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31765\n\n```\nCrash type: Use-after-poison READ 8\nCrash state:\nstd::__1::unique_ptr\u003cSkSL::Expression, std::__1::default_delete\u003cSkSL::Expression\nSkSL::DefinitionMap::getKnownDefinition\nSkSL::VariableReference::constantPropagate\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-03-07T00:00:48.743475Z","modified":"2022-04-13T03:04:33Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"skia","ranges":[{"type":"GIT","events":[{"introduced":"7c6e77087fdfce91af6e43229cc7648fdfdca614"},{"fixed":"8f440b4e1e22ab95386b48dc0e1250704864aa74"}]}],"versions":["canvaskit/0.24.0","canvaskit/0.25.0"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31765","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2021-503","title":"Use-after-poison in std::__1::unique_ptr\u003cSkSL::Expression, std::__1::default_delete\u003cSkSL::Expression","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31765\n\n```\nCrash type: Use-after-poison READ 8\nCrash state:\nstd::__1::unique_ptr\u003cSkSL::Expression, std::__1::default_delete\u003cSkSL::Expression\nSkSL::DefinitionMap::getKnownDefinition\nSkSL::VariableReference::constantPropagate\n```\n","status":"published","published":"2021-03-07T00:00:48.743475Z","modified":"2022-04-13T03:04:33.774982Z","updated_at":"2026-11-02T15:52:49.04248Z"}]}}