OSV-2020-515

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/cryptofuzz/OSV-2020-515.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-515

Published

2020-07-01T00:00:13.977406Z

Modified

2022-04-13T03:04:35.049761Z

Summary

Use-of-uninitialized-value in bool std::__1::equal<std::__1::__wrap_iter<unsigned char const*>, std::__1::__wr

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18320

Crash type: Use-of-uninitialized-value
Crash state:
bool std::__1::equal&lt;std::__1::__wrap_iter&lt;unsigned char const*>, std::__1::__wr
bool std::__1::operator==&lt;unsigned char, std::__1::allocator&lt;unsigned char> >
cryptofuzz::ExecutorBase&lt;cryptofuzz::Buffer, cryptofuzz::operation::CMAC>::compa

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18320

Affected packages

OSS-Fuzz / cryptofuzz

Package

Name: cryptofuzz
Purl: pkg:generic/cryptofuzz

Affected ranges

Type: GIT
Repo: https://github.com/guidovranken/cryptofuzz
Events: Introduced

6c21912ea6f8c535aa4d1ef527453cf9605d952f

Fixed

69c82214652a0a5d2aab9e4ab077a87ffa8057fb

Ecosystem specific

{
    "severity": "MEDIUM"
}