OSV-2021-639

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-639

Published

2021-04-16T00:00:26.662778Z

Modified

2022-04-13T03:04:40.190058Z

Summary

Heap-buffer-overflow in blosc_d

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33264

Crash type: Heap-buffer-overflow READ {*}
Crash state:
blosc_d
_blosc_getitem
blosc2_getitem_ctx

References

Affected packages

Type: GIT
Repo: https://github.com/Blosc/c-blosc2.git
Events: Introduced

d1ea514286c47433dabcf47b11cf81d2248ca5bf

Fixed

4a727370b1c2e9746434c00bf2236db86c31ea5c

{
    "severity": "MEDIUM"
}