CVE-2021-33641: Openeuler Byacc

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).

Affected products

• Openeuler Byacc: before 1.9.20200330 (fixed in 1.9.20200330); from 2.0, before 2.0.20210808 (fixed in 2.0.20210808)

Published 2023-01-20. Last modified 2026-06-17.