OSV-2020-1565

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-1565

Published

2020-08-02T00:00:39.707050Z

Modified

2022-04-13T03:04:32.612067Z

Summary

Heap-buffer-overflow in allocate_field

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24586

Crash type: Heap-buffer-overflow WRITE 8
Crash state:
allocate_field
pb_dec_string
decode_basic_field

References

Affected packages

Type: GIT
Repo: https://github.com/nanopb/nanopb
Events: Introduced

a5988446e6a257a1c968f8a7a6366f5101d85413

Fixed

cf507d1b1e71b45136ca2bd7d37b7b4958443cd1

{
    "severity": "HIGH"
}