OSV-2021-1672

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1672.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-1672
Published
2021-12-12T00:01:29.747137Z
Modified
2024-11-28T14:12:44.146501Z
Summary
Heap-buffer-overflow in blosc_d
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210

Crash type: Heap-buffer-overflow READ 4
Crash state:
blosc_d
do_job
blosc_run_decompression_with_context
References

Affected packages

OSS-Fuzz / c-blosc2

Package

Name
c-blosc2
Purl
pkg:generic/c-blosc2

Affected ranges

Type
GIT
Repo
https://github.com/Blosc/c-blosc2.git
Events

Affected versions

v2.*

v2.0.0
v2.0.0-rc2
v2.0.0.rc1
v2.0.1
v2.0.2
v2.0.3
v2.0.4
v2.1.0
v2.1.1
v2.10.0
v2.10.1
v2.10.2
v2.10.3
v2.10.4
v2.10.5
v2.11.0
v2.11.1
v2.11.2
v2.11.3
v2.12.0
v2.13.0
v2.13.1
v2.13.2
v2.14.0
v2.14.1
v2.14.2
v2.14.3
v2.14.4
v2.15.0
v2.15.1
v2.15.2
v2.2.0
v2.3.0
v2.3.1
v2.4.0
v2.4.1
v2.4.2
v2.4.3
v2.5.0
v2.6.0
v2.6.1
v2.7.0
v2.7.1
v2.8.0
v2.9.0
v2.9.1
v2.9.2
v2.9.3

Ecosystem specific

{
    "severity": "MEDIUM"
}