OSV-2022-343

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/fastjson2/OSV-2022-343.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-343
Published
2022-04-15T00:01:30.888554Z
Modified
2022-08-03T00:19:59.503915Z
Summary
Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46696

Crash type: Uncaught exception
Crash state:
com.alibaba.fastjson.JSONPath.getPropertyValue
java.base/jdk.internal.math.FDBigInteger.multByPow52
java.base/jdk.internal.math.FloatingDecimal$ASCIIToBinaryBuffer.floatValue
References

Affected packages

OSS-Fuzz / fastjson2

Package

Name
fastjson2
Purl
pkg:generic/fastjson2

Affected ranges

Type
GIT
Repo
https://github.com/alibaba/fastjson
Events
Introduced
6841ca79104f6b78179e44b56ae9a033b8131c70
Fixed
bcd0505019425b2b8a7146828bec51739b933318

Affected versions

1.*

1.2.80

Ecosystem specific 

{
    "severity": "LOW"
}

Database specific 

{
    "introduced_range": "6460f65759694488446a51e79f74c742290fc13e:e14b1e4a2c8d55ccc6b7d3c57dd172b4176988d2"
}