CLEANSTART-2023-CR50278

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2023/CLEANSTART-2023-CR50278.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLEANSTART-2023-CR50278
Upstream
Published
2026-09-30T19:15:01Z
Modified
2026-10-01T00:45:07Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4
Details

Security vulnerability affects the chicken package. An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4.

References

Affected packages

CleanStart / chicken

Package

Name
chicken

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.12.0-r2

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2023/CLEANSTART-2023-CR50278.json"