OSV-2021-371

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-371

Published

2021-02-11T00:01:05.353649Z

Modified

2022-04-13T03:04:40.238298Z

Summary

Heap-buffer-overflow in frame_get_lazychunk

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30772

Crash type: Heap-buffer-overflow READ 4
Crash state:
frame_get_lazychunk
frame_decompress_chunk
blosc2_schunk_decompress_chunk

References

Affected packages

Type: GIT
Repo: https://github.com/Blosc/c-blosc2.git
Events: Introduced

57fca38a4f51687d71e451ae29df6b353764fb72

Fixed

5a222cc79dc67ce01477da3a3ee10edf1076c655

{
    "severity": "MEDIUM"
}