OSV-2020-348

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libsass/OSV-2020-348.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-348
Published
2020-07-01T00:00:04.559189Z
Modified
2022-04-13T03:04:38.487815Z
Summary
Heap-buffer-overflow in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15893

Crash type: Heap-buffer-overflow READ 8
Crash state:
std::__1::vector&lt;std::__1::vector&lt;Sass::SharedImpl<Sass::ComplexSelector>, std::
Sass::ComplexSelector::resolve_parent_refs
Sass::SelectorList::resolve_parent_refs
References

Affected packages

OSS-Fuzz / libsass

Package

Name
libsass
Purl
pkg:generic/libsass

Affected ranges

Type
GIT
Repo
https://github.com/sass/libsass.git
Events
Introduced
f964dcddd76f4c1f00da06bfd905be790618c33b
Fixed
04a234a7bd5e74b0eb5be489f831a9c0d08c8606

Ecosystem specific 

{
    "severity": "MEDIUM"
}