OSV-2018-228

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/glib/OSV-2018-228.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2018-228

Published

2021-01-13T00:01:34.116112Z

Modified

2022-04-13T03:04:32.546035Z

Summary

Heap-buffer-overflow in g_variant_serialiser_is_string

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9828

Crash type: Heap-buffer-overflow READ 1
Crash state:
g_variant_serialiser_is_string
g_variant_serialiser_is_object_path
g_variant_serialised_is_normal

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9828

Affected packages

OSS-Fuzz / glib

Package

Name: glib
Purl: pkg:generic/glib

Affected ranges

Type: GIT
Repo: https://gitlab.gnome.org/GNOME/glib
Events: Introduced

10ee7301e8edb13e59143ee5653cd2b46e26c044

Fixed

372e81b56ca4cdbccc3a036b41442bdc58e2164e

Affected versions

2.*

2.57.3

2.58.0

2.58.1

2.58.2

2.58.3

Ecosystem specific

{
    "severity": "MEDIUM",
    "introduced_range": "8defa46e6ec16aa3722aa0ac0bc3db0fecd86c45:0d271223d894e9c69b7fa6b7983511f8ad770682"
}