OSV-2021-1347

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/swift-protobuf/OSV-2021-1347.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-1347

Published

2021-09-22T00:00:35.224651Z

Modified

2022-04-13T03:04:35.872621Z

Summary

Invalid-free in generic specialization <Swift.Int> of Swift.Array.subscript.getter :

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39049

Crash type: Invalid-free
Crash state:
generic specialization <Swift.Int> of Swift.Array.subscript.getter :
SwiftProtobuf.
SwiftProtobuf.Google_Protobuf_Timestamp.decodeJSON

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39049

Affected packages

OSS-Fuzz / swift-protobuf

Package

Name: swift-protobuf
Purl: pkg:generic/swift-protobuf

Affected ranges

Type: GIT
Repo: https://github.com/apple/swift-protobuf.git
Events: Introduced

afe828b40394f68482167a14cc4d17fabb4c357c

Fixed

32cdef52680fc5388f62c9c539a4fca8a34c4390

Affected versions

1.*

1.17.0

Ecosystem specific

{
    "severity": null
}

Database specific

fixed_range

"b426152ab86132d40c26345db32b4310d7d80e0b:32cdef52680fc5388f62c9c539a4fca8a34c4390"

introduced_range

"bfe4255ff60f22a41cafa113059668571ed5d461:3bd5c56c26c0fddab8fcb6b2b06d773702bf1bfb"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/swift-protobuf/OSV-2021-1347.yaml"