OSV-2021-955

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ujson/OSV-2021-955.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-955
Published
2021-07-11T00:01:05.153778Z
Modified
2022-05-19T00:45:08.957102Z
Summary
Stack-buffer-overflow in Buffer_AppendIndentUnchecked
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36009

Crash type: Stack-buffer-overflow WRITE 1
Crash state:
Buffer_AppendIndentUnchecked
encode
encode
References

Affected packages

PyPI / ujson

Package

Affected ranges

Type
GIT
Repo
https://github.com/ultrajson/ultrajson.git
Events

Affected versions

v1.*

v1.34
v1.35

2.*

2.0.0
2.0.1
2.0.2
2.0.3

3.*

3.0.0
3.1.0
3.2.0

4.*

4.0.0
4.0.1
4.0.2
4.1.0
4.2.0
4.3.0

5.*

5.0.0
5.1.0

Ecosystem specific

{
    "severity": "HIGH"
}