Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
mapbox/mapbox-gl-native
master @ f277825
20
Fixes
0
CVEs
HIGH
Peak severity
76.5%
Coverage
Highlights
Denial of Service: 8 prior fixes. Scrutinize any change in this area.
platform/android/MapboxGLAndroidSDK/src/main/java/com/mapbox/mapboxsdk/location/LocationServices.java: most-fixed (2 issues). Treat as high-risk during review.
10 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Use-After-Free: Native calls can be made after cancellation, leading to use-after-free; fix added lock and null check but sibling paths may not enforce the same.
Use-After-Free: Object deletion while holding a lock can cause use-after-free; fix releases lock before delete, but other deletion paths may still be unsafe.
Memory Corruption: Heap buffer overflow in WebP decoding due to undersized buffer; fix uses WebPDecodeRGBAInto but other decode entry points may still use the unsafe API.