OSV-2020-273

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-273

Published

2020-06-30T00:00:44.820643Z

Modified

2022-04-13T03:04:41.226766Z

Summary

Heap-use-after-free in copy_string

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19509

Crash type: Heap-use-after-free READ 1
Crash state:
copy_string
do_uncompress_block
process_block

References

Affected packages

Type: GIT
Repo: https://github.com/libarchive/libarchive.git
Events: Introduced

47bb8187d3ef2d49ee8c7841cb2872b3cfa1f6f7

Fixed

c9267d665c30fa78023bd70b8e9c6f02450777e2

{
    "severity": "HIGH"
}