OSV-2020-819

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/flac/OSV-2020-819.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-819
Published
2020-07-14T05:37:48.643285Z
Modified
2022-04-13T03:04:40.524536Z
Summary
Use-of-uninitialized-value in fuzzing::memory::memory_test_msan
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22224

Crash type: Use-of-uninitialized-value
Crash state:
fuzzing::memory::memory_test_msan
fuzzing::memory::memory_test
FLAC::Decoder::FuzzerStream::write_callback
References

Affected packages

OSS-Fuzz / flac

Package

Name
flac
Purl
pkg:generic/flac

Affected ranges

Type
GIT
Repo
https://github.com/xiph/flac.git
Events
Introduced
ce6dd6b5732e319ef60716d9cc9af6a836a4011a
Fixed
bfd4f13f3eb1f4d4f9f723e343f63eceedb267ba
Fixed
b358381a102a2c1c153ee4cf95dfc04af62faa1a

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "fixed_range": "bfd4f13f3eb1f4d4f9f723e343f63eceedb267ba:b358381a102a2c1c153ee4cf95dfc04af62faa1a"
}