OSV-2017-131

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/file/OSV-2017-131.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2017-131
Published
2021-01-15T00:00:17.673475Z
Modified
2022-04-13T03:04:30.854629Z
Summary
Heap-buffer-overflow in mprint
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1516

Crash type: Heap-buffer-overflow READ 2
Crash state:
mprint
match
file_softmagic
References

Affected packages

OSS-Fuzz / file

Package

Name
file
Purl
pkg:generic/file

Affected ranges

Type
GIT
Repo
https://github.com/file/file.git
Events
Introduced
a317154a5acbdcc82db79063742481ce83abafe7
Fixed
6fc66d12c0ca172f4681adb63c6f662ac33cbc7c

Affected versions

Other

FILE5_30
FILE5_31
FILE5_32
FILE5_33
FILE5_34
FILE5_35
FILE5_36
FILE5_37
FILE5_38
FILE5_39

Ecosystem specific 

{
    "severity": "MEDIUM",
    "fixed_range": "100ff6d0edb3441962e518690b327186dbc0e652:6fc66d12c0ca172f4681adb63c6f662ac33cbc7c"
}