OSV-2021-1418

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/spirv-tools/OSV-2021-1418.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-1418
Published
2021-10-07T00:00:34Z
Modified
2022-04-13T03:04:34Z
Summary
Heap-buffer-overflow in spvTextEncodeOperand
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39637

Crash type: Heap-buffer-overflow READ 4
Crash state:
spvTextEncodeOperand
spvTextEncodeOperand
spvTextEncodeOpcode
References

Affected packages

OSS-Fuzz / spirv-tools

Package

Name
spirv-tools
Purl
pkg:generic/spirv-tools

Affected ranges

Type
GIT
Repo
https://github.com/KhronosGroup/SPIRV-Tools.git
Events
Introduced
2d12367ced2dd34444822340070b4545ae7c02f1
Fixed
75e53b9f685830ac42242cf0c46cc9af523bd0df

Affected versions

sdk-1.*
sdk-1.2.198.0
v2021.*
v2021.4

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/spirv-tools/OSV-2021-1418.yaml"