OSV-2021-333

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/flatbuffers/OSV-2021-333.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-333

Published

2021-02-10T00:00:03.957076Z

Modified

2022-04-13T03:04:42.062018Z

Summary

Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30699

Crash type: Heap-buffer-overflow READ 4
Crash state:
int flatbuffers::ReadScalar<int>
flatbuffers::Table::GetVTable
flatbuffers::Table::GetOptionalFieldOffset

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30699

Affected packages

OSS-Fuzz / flatbuffers

Package

Name: flatbuffers
Purl: pkg:generic/flatbuffers

Affected ranges

Type: GIT
Repo: https://github.com/google/flatbuffers
Events: Introduced

6f3e45eca1fde7a68cb72fd4499a3647f719c9db

Fixed

8fb8c2ce1dff00bc1455aba0770eb7eae9a06ece

Affected versions

v2.*

v2.0.0

Ecosystem specific

{
    "severity": "MEDIUM"
}

Database specific

{
    "fixed_range": "1d063d87cfce93f498648b005fb72e33d031ffdd:8fb8c2ce1dff00bc1455aba0770eb7eae9a06ece"
}