OSV-2020-654

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-654

Published

2020-07-01T00:00:22.703216Z

Modified

2022-04-13T03:04:31.648748Z

Summary

Heap-buffer-overflow in ZSTD_copy16

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17451

Crash type: Heap-buffer-overflow READ 16
Crash state:
ZSTD_copy16
ZSTD_decompressSequences_bmi2
ZSTD_decompressBlock_internal

References

Affected packages

Type: GIT
Repo: https://github.com/facebook/zstd
Events: Introduced

bfff5b30a4a73a6ce0e6e81e9291418fd3f9761a

Fixed

efd37a64eaff5a0a26ae2566fdb45dc4a0c91673

{
    "severity": "MEDIUM"
}