OSV-2022-1174

Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/karchive/OSV-2022-1174.yaml
Published
2022-11-16T13:02:12.420492Z
Modified
2023-10-19T14:04:15.204368Z
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53423

Crash type: Heap-buffer-overflow READ 16
Crash state:
crc64_clmul
lzma_crc64
lzma_check_update
References

Affected packages

OSS-Fuzz / karchive

Package

Name
karchive

Affected ranges

Type
GIT
Repo
https://invent.kde.org/frameworks/karchive.git
Events
Introduced
e6225a1fb55c4390835e2992caf5adff20d36e95
Fixed
e4248bcb57dfcf8564753c317d01cff8c62fe3b8

Affected versions

v5.*

v5.101.0
v5.101.0-rc1
v5.102.0
v5.102.0-rc1
v5.103.0
v5.103.0-rc1
v5.104.0
v5.104.0-rc1
v5.105.0
v5.105.0-rc1
v5.106.0
v5.106.0-rc1
v5.107.0
v5.107.0-rc1
v5.108.0
v5.108.0-rc1
v5.109.0
v5.109.0-rc1
v5.110.0
v5.110.0-rc1
v5.111.0
v5.111.0-rc1

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "introduced_range": "350c8b192f9227b9869ccf1523b5a37329f083bf:ffbc107db9453c3271d61a95c362c30979f190a8",
    "fixed_range": "2677705d2abf582907576cae47397ef8cf5ff3f3:e4248bcb57dfcf8564753c317d01cff8c62fe3b8"
}