OSV-2020-2300

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-2300

Published

2021-01-13T00:00:07.792566Z

Modified

2022-04-13T03:04:43.161034Z

Summary

Heap-buffer-overflow in H5MM_strdup

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29493

Crash type: Heap-buffer-overflow READ {*}
Crash state:
H5MM_strdup
H5O_attr_shared_decode
H5O_msg_iterate_real

References

Affected packages

Type: GIT
Repo: git://git.code.sf.net/p/matio/matio
Events: Introduced

a47b7cd3aca70e9a0bddf8146eb4ab0cbd19c2c3

Fixed

8195e5d3e3c65ff6bcc0aae31a4a53eb609c4d7e

v1.5.18

v1.5.19

{
    "severity": "MEDIUM"
}