OSV-2022-248

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/arrow-java/OSV-2022-248.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-248

Published

2022-03-16T00:01:40.965144Z

Modified

2022-04-13T03:04:31.580413Z

Summary

Uncaught exception in java.base/java.nio.Bits.reserveMemory

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45563

Crash type: Uncaught exception
Crash state:
java.base/java.nio.Bits.reserveMemory
java.base/java.nio.DirectByteBuffer.<init>
java.base/java.nio.ByteBuffer.allocateDirect

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45563

Affected packages

OSS-Fuzz / arrow-java

Package

Name: arrow-java
Purl: pkg:generic/arrow-java

Affected ranges

Type: GIT
Repo: https://github.com/apache/arrow.git
Events: Introduced

ed03ea2401deeeca4a3274a8a0ca7124d07cde33

Fixed

3eaa7dd0e8b3dabc5438203331f05e3e6c011e37

Ecosystem specific

{
    "severity": "LOW"
}

Database specific

{
    "introduced_range": "5592cf7cc7056679f1d7fd0ca2f9a9149e97b5c2:0ed5fa166107387246024c6dd7cf42f5eed54c38",
    "fixed_range": "884d2b873c2103b247aa3cd38e38be20079b0890:3eaa7dd0e8b3dabc5438203331f05e3e6c011e37"
}