OSV-2020-1507

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tpm2/OSV-2020-1507.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-1507
Published
2020-07-28T00:00:34.623899Z
Modified
2023-02-24T01:39:07.720489Z
Summary
Index-out-of-bounds in MemoryRemoveTrailingZeros
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23127

Crash type: Index-out-of-bounds
Crash state:
MemoryRemoveTrailingZeros
CheckPWAuthSession
CheckAuthSession
References

Affected packages

OSS-Fuzz / tpm2

Package

Name
tpm2
Purl
pkg:generic/tpm2

Affected ranges

Type
GIT
Repo
https://chromium.googlesource.com/chromiumos/third_party/tpm2
Events
Introduced
1a68fe6fa860f563e8b45e3826110ceec75d61a8
Introduced
5e4dd24d2d92ea9b9582388be6ecf4a055605c8b
Fixed
65c804e123ea391008f7675bec4b4108669a0f58
Fixed
59ce8a4993e215973e1a9741dd287e989a3e53f8
Fixed
601f56c69e97eed8d87d003099c80af7163b250a

Affected versions

cr50_v3.*

cr50_v3.4

cr50_v4.*

cr50_v4.4
cr50_v4.5

v1.*

v1.9308_26_0.0.22

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "fixed_range": "3b87ed233acb4c76c27872e1ac0b74dc032199f1:65c804e123ea391008f7675bec4b4108669a0f58"
}