OSV-2021-564

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/jackson-core/OSV-2021-564.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-564

Published

2021-03-27T00:00:03.319694Z

Modified

2022-04-13T03:04:31.790105Z

Summary

Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32514

Crash type: Uncaught exception
Crash state:
com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray
java.base/java.lang.Module.isStaticallyExportedOrOpen
java.base/java.lang.Module.implIsExportedOrOpen

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32514

Affected packages

OSS-Fuzz / jackson-core

Package

Name: jackson-core
Purl: pkg:generic/jackson-core

Affected ranges

Type: GIT
Repo: https://github.com/FasterXML/jackson-core
Events: Introduced

f3488801e4839fe35a5419ece9b9ac2693be5a18

Fixed

66b44ad1c0e1715454725b6d6ddade3102311584

Ecosystem specific

{
    "fixed_range": "0deae137735e1c81159e83bd1b4613e6d6b36501:66b44ad1c0e1715454725b6d6ddade3102311584",
    "severity": "LOW",
    "introduced_range": "8a2036e948ee849b922121c061c002cb0e131bfa:0deae137735e1c81159e83bd1b4613e6d6b36501"
}

Database specific

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/jackson-core/OSV-2021-564.yaml"