{"action":"Upgrade pyboolector to 3.1.0 or later.","affected":[{"fixed":"3.1.0","introduced":"0"}],"component":"pyboolector","cve_ids":["CVE-2019-7560"],"ecosystem":"PyPI","epss":0.00959,"exploited":false,"fixed_versions":["3.1.0"],"ghsa_id":"GHSA-g58x-799h-v9h6","id":"tcs_01M5KG96S99D00GKXJXAJHW93C","modified_at":"2024-11-25T22:42:14.884068Z","published_at":"2019-02-07T07:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-252","https://github.com/Boolector/boolector/issues/29","https://github.com/Boolector/boolector/issues/28"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"PYSEC-2019-252","url":"https://osv.dev/vulnerability/PYSEC-2019-252"}],"summary":"In parser/btorsmt2.c in Boolector 3.0.0, opening a specially crafted input file leads to a use after free in get_failed_assumptions or btor_delete."}