OSV-2020-2247

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openthread/OSV-2020-2247.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-2247
Published
2020-12-06T00:00:26.193153Z
Modified
2022-04-13T03:04:39.024692Z
Summary
Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28315

Crash type: Stack-buffer-overflow READ 1
Crash state:
ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize
ot::MeshCoP::ChannelMaskEntryBase::GetNext
ot::MeshCoP::ChannelMaskBaseTlv::IsValid
References

Affected packages

OSS-Fuzz / openthread

Package

Name
openthread
Purl
pkg:generic/openthread

Affected ranges

Type
GIT
Repo
https://github.com/openthread/openthread
Events
Introduced
761f8304c18492a66308d1529f45e410c7673f9e
Fixed
02f7dbb42be7f75355436ec43bc82d0b2b4caad6

Ecosystem specific 

{
    "severity": "MEDIUM"
}