OSV-2021-349

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/flatbuffers/OSV-2021-349.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-349
Published
2021-02-10T00:00:39.669242Z
Modified
2022-04-13T03:04:42.089425Z
Summary
Heap-buffer-overflow in flatbuffers::vector_downward::fill
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30684

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
flatbuffers::vector_downward::fill
flatbuffers::FlatBufferBuilder::PreAlign
flatbuffers::FlatBufferBuilder::ForceVectorAlignment
References

Affected packages

OSS-Fuzz / flatbuffers

Package

Name
flatbuffers
Purl
pkg:generic/flatbuffers

Affected ranges

Type
GIT
Repo
https://github.com/google/flatbuffers
Events
Introduced
6f3e45eca1fde7a68cb72fd4499a3647f719c9db
Fixed
fee095410b0969765b5c2545c10e585f69e961b0

Ecosystem specific 

{
    "severity": "HIGH"
}