OSV-2021-1605

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/perfetto/OSV-2021-1605.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-1605

Published

2021-11-22T00:00:36.355325Z

Modified

2022-04-13T03:04:42.003237Z

Summary

Heap-use-after-free in perfetto::trace_processor::SliceTracker::GetStackHash

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41226

Crash type: Heap-use-after-free READ 8
Crash state:
perfetto::trace_processor::SliceTracker::GetStackHash
perfetto::trace_processor::SliceTracker::StartSlice
perfetto::trace_processor::SliceTracker::Scoped

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41226

Affected packages

OSS-Fuzz / perfetto

Package

Name: perfetto
Purl: pkg:generic/perfetto

Affected ranges

Type: GIT
Repo: https://android.googlesource.com/platform/external/perfetto/
Events: Introduced

c986ca1784a49445c82d4f02c97361a9c0e9e677

Fixed

5d40eca0de4d3e907944dbf9251552219d125f16

Ecosystem specific

{
    "severity": "HIGH"
}