OSV-2021-247

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-247

Published

2021-01-29T00:00:56.462283Z

Modified

2022-04-13T03:04:40.418884Z

Summary

Heap-buffer-overflow in blosc_getitem

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29976

Crash type: Heap-buffer-overflow READ 1
Crash state:
blosc_getitem
get_coffset
frame_get_lazychunk

References

Affected packages

Type: GIT
Repo: https://github.com/Blosc/c-blosc2.git
Events: Introduced

c473b21cff5e1a459b4467f18bf7414114f848fd

Fixed

7f86c209450b39ab7fc898707984e746c7ef2ebb

{
    "severity": "MEDIUM"
}