OSV-2020-784

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libzmq/OSV-2020-784.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-784
Published
2020-07-14T05:37:33.175193Z
Modified
2022-04-13T03:04:32.781119Z
Summary
Bad-cast to zmq::session_base_t from invalid vptr
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24018

Crash type: Bad-cast
Crash state:
Bad-cast to zmq::session_base_t from invalid vptr
zmq::stream_engine_base_t::in_event_internal
zmq::stream_engine_base_t::in_event
References

Affected packages

OSS-Fuzz / libzmq

Package

Name
libzmq
Purl
pkg:generic/libzmq

Affected ranges

Type
GIT
Repo
https://github.com/zeromq/libzmq.git
Events
Introduced
eb9118f0c9b9a70c0d2356838190350e9f88ed6f
Fixed
c733067d6d52acc8031792316c0ee58990cdd0e8
Fixed
d280c44fe00092d240f4da19b1247124069371c7

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific 

{
    "fixed_range": "87ee10643854b1d27afd65fb1ec930dcedf35676:d280c44fe00092d240f4da19b1247124069371c7"
}