OSV-2021-305

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-305

Published

2021-02-08T00:00:06.404697Z

Modified

2022-04-13T03:04:32.317259Z

Summary

Heap-buffer-overflow in rle_decode

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30395

Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
rle_decode
rans_uncompress_to_4x16
rans_uncompress_4x16

References

Affected packages

Type: GIT
Repo: https://github.com/samtools/htslib.git
Events: Introduced

0d1971cbebb269d90a563464e4f56987290e20ab

Fixed

56ac133b2fd4b41b2f05f8a3f30134fd79f7b31f

{
    "severity": "HIGH"
}