OSV-2020-742

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/hoextdown/OSV-2020-742.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-742
Published
2020-07-04T00:00:01Z
Modified
2022-04-13T03:04:36Z
Summary
Heap-buffer-overflow in is_codefence
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23764

Crash type: Heap-buffer-overflow READ 1
Crash state:
is_codefence
parse_listitem
parse_definition
References

Affected packages

OSS-Fuzz / hoextdown

Package

Name
hoextdown
Purl
pkg:generic/hoextdown

Affected ranges

Type
GIT
Repo
https://github.com/kjdev/hoextdown.git
Events
Introduced
d01948a1c9af87f2284235df7c66e5cee05f724e
Fixed
7c7dc6ac9adce5413ab54dcd604db95a9b935b05

Affected versions

3.*
3.0.7.16
3.0.7.17

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/hoextdown/OSV-2020-742.yaml"