OSV-2020-624

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-624

Published

2020-07-01T00:00:21.077578Z

Modified

2022-04-13T03:04:41.753082Z

Summary

Heap-buffer-overflow in LZ4_write32

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15941

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
LZ4_write32
LZ4_compress_fast_extState
LZ4_compress_fast

References

Affected packages

Type: GIT
Repo: https://github.com/lz4/lz4.git
Events: Introduced

3c40db8d258716b9efcfb46fa6dc29de6e43e616

Fixed

13a2d9e34ffc4170720ce417c73e396d0ac1471a

{
    "severity": "HIGH"
}