OSV-2022-125

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grpc-swift/OSV-2022-125.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-125
Published
2022-02-06T00:01:40.863807Z
Modified
2022-04-13T03:04:36.950396Z
Summary
Invalid-free in NIOHTTP2.NIOHTTP2Handler.
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44431

Crash type: Invalid-free
Crash state:
NIOHTTP2.NIOHTTP2Handler.
NIOHTTP2.NIOHTTP2Handler.channelRead
NIOCore.ChannelHandlerContext.
References

Affected packages

OSS-Fuzz / grpc-swift

Package

Name
grpc-swift
Purl
pkg:generic/grpc-swift

Affected ranges

Type
GIT
Repo
https://github.com/grpc/grpc-swift
Events

Affected versions

1.*

1.1.0
1.1.1
1.2.0
1.3.0
1.4.0
1.4.1
1.4.1-async-await.1
1.4.1-async-await.2
1.4.1-async-await.3
1.4.2
1.5.0
1.6.0
1.6.0-async-await.1
1.6.1
1.7.0

Ecosystem specific

{
    "severity": null
}

Database specific

{
    "introduced_range": "a19bc8cf4540276daa08b1038a0ccd246c1b9cbc:972c701444f5a366ce055039b63bdb62427e1a22",
    "fixed_range": "393feb7d38baf5b04189a165147ab65d0b4b0453:d7961746769616d0b81bda771de5648ebfa1abf9"
}