BugZero found this defect 38 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
4/11/2024
MongoDB Server
No affected releases provided.
No fixed releases provided.
Wrapper object use after free A use after free bug would occur if the internal pointer is used. An internal pointer of a wrapper object remains available after the object is freed /src/mongo/db/query/get_executor.cpp:1713: WRAPPER_ESCAPE 142885 Calling "get" which extracts wrapped state from local "cq". /src/mongo/db/query/get_executor.cpp:1713: WRAPPER_ESCAPE 142885 The internal representation of local "cq" escapes into "deleteStageParams->canonicalQuery", but is destroyed when it exits scope.