OSV-2020-1990

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-1990

Published

2020-10-06T00:00:11.269608Z

Modified

2022-04-13T03:04:41.634585Z

Summary

Heap-buffer-overflow in sc_oberthur_parse_privateinfo

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26116

Crash type: Heap-buffer-overflow READ 1
Crash state:
sc_oberthur_parse_privateinfo
sc_pkcs15emu_oberthur_init
sc_pkcs15emu_oberthur_init_ex

References

Affected packages

Type: GIT
Repo: https://github.com/OpenSC/OpenSC
Events: Introduced

6903aebfddc466d966c7b865fae34572bf3ed23e

Fixed

fca2ba9474e150e72282317b91ce68d0b801f573

0.21.0-rc1

{
    "severity": "MEDIUM"
}