OSV-2022-1106

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/sleuthkit/OSV-2022-1106.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-1106
Published
2022-10-28T00:02:37Z
Modified
2025-06-28T14:21:48Z
Summary
Heap-buffer-overflow in APFSJObject::add_entry
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52764

Crash type: Heap-buffer-overflow READ {*}
Crash state:
APFSJObject::add_entry
APFSJObject::APFSJObject
APFSJObject::APFSJObject
References

Affected packages

OSS-Fuzz / sleuthkit

Package

Name
sleuthkit
Purl
pkg:generic/sleuthkit

Affected ranges

Type
GIT
Repo
https://github.com/sleuthkit/sleuthkit
Events
Introduced
58c8b602d5134ab69be2826410005c2894e45a73
Fixed
37493d4561bd67aa0f4a6d182bc4c327b26cf2f9

Affected versions

ct-3.*
ct-3.10.0
ct-3.11.0
ct-3.12.0
ct-3.13.0
ct-3.6.0
ct-3.8.0
ct-3.9.0
sleuthkit-4.*
sleuthkit-4.12.0
sleuthkit-4.12.1
sleuthkit-4.13.0
sleuthkit-4.14.0

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"5a9e83351c559744072d8e4277fe5ab270a2fbb8:37493d4561bd67aa0f4a6d182bc4c327b26cf2f9"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/sleuthkit/OSV-2022-1106.yaml"