OSV-2021-392

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-392

Published

2021-02-14T00:00:02.251664Z

Modified

2022-04-13T03:04:39.733776Z

Summary

Heap-buffer-overflow in heredoc_remove_indent

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30886

Crash type: Heap-buffer-overflow READ {*}
Crash state:
heredoc_remove_indent
parse_string
parser_yylex

References

Affected packages

Type: GIT
Repo: https://github.com/mruby/mruby
Events: Introduced

0d22e11b757c6fe9b30e55cb7d83ab7421575968

Fixed

94fb86f89b131814201596d301f584dfe4547526

3.0.0-rc

{
    "severity": "MEDIUM"
}