OSV-2020-612

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libsass/OSV-2020-612.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-612

Published

2020-07-01T00:00:20.375619Z

Modified

2022-04-13T03:04:38.465562Z

Summary

Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18066

Crash type: Use-of-uninitialized-value
Crash state:
std::__1::vector&lt;std::__1::vector&lt;Sass::SharedImpl<Sass::ComplexSelector>, std::
Sass::ComplexSelector::resolve_parent_refs
Sass::Eval::operator

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18066

Affected packages

OSS-Fuzz / libsass

Package

Name: libsass
Purl: pkg:generic/libsass

Affected ranges

Type: GIT
Repo: https://github.com/sass/libsass.git
Events: Introduced

f964dcddd76f4c1f00da06bfd905be790618c33b

Fixed

4c83fdb0fe90432cc9b778d816ffd6859e34ef2d

Affected versions

3.*

3.6.2

3.6.3

Ecosystem specific

{
    "severity": "MEDIUM"
}