OSV-2020-187

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/arrow/OSV-2020-187.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-187
Published
2020-06-24T01:51:18.041219Z
Modified
2022-04-13T03:04:31.954408Z
Summary
UNKNOWN READ in arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeDataBufferInt32
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21680

Crash type: UNKNOWN READ
Crash state:
arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeDataBufferInt32
arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeInitialBuffer
arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeBuffer
References

Affected packages

OSS-Fuzz / arrow

Package

Name
arrow
Purl
pkg:generic/arrow

Affected ranges

Type
GIT
Repo
https://github.com/apache/arrow.git
Events
Introduced
866e6a82e2794b151235c19b8c5cbf1fcaf780ef
Fixed
c47d0d3df865d34d877c84042c11a7cb259f7cdd
Fixed
1dd59944a0f1f4f458e3a3e44cd816e3a87df13f

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "fixed_range": "d5dfa0ec083163f5d4b62dd35d9c305bdcb856b2:1dd59944a0f1f4f458e3a3e44cd816e3a87df13f"
}