OSV-2022-1145

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/oniguruma/OSV-2022-1145.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-1145
Published
2022-11-06T00:01:05.747777Z
Modified
2022-11-06T00:01:05.748011Z
Summary
Heap-buffer-overflow in gbNUMBER_mbc_enc_len
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53046

Crash type: Heap-buffer-overflow READ 1
Crash state:
gbNUMBER_mbc_enc_len
onigenc_mbn_mbc_to_code
gbNUMBER_mbc_to_code
References

Affected packages

OSS-Fuzz / oniguruma

Package

Name
oniguruma
Purl
pkg:generic/oniguruma

Affected ranges

Type
GIT
Repo
https://github.com/kkos/oniguruma.git
Events
Introduced
9eefafd7d4294af6e05c8aa41c4327b9adef5029
Fixed
34eac8830181bc348dab845932ae3368d1bcf3ff

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "introduced_range": "9a64b3925c9f2f86fa3bb5d5b8bcee22b7462b5e:f7ff8bc6e9535b0227e2d146e596befc920beca2"
}