OSV-2021-1227

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-1227

Published

2021-09-11T00:01:45.898877Z

Modified

2022-04-13T03:04:35.752295Z

Summary

Heap-buffer-overflow in blosclz_compress

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38313

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
blosclz_compress
blosc_c
do_job

References

Affected packages

Type: GIT
Repo: https://github.com/Blosc/c-blosc.git
Events: Introduced

cfa760c8ae8803111b5da55ea1fff65e1d8f80b8

Fixed

8f702156e8c9ecc8bbcbabfc0d8ee38bc294dddd

{
    "severity": "HIGH"
}