OSV-2022-412

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/upb/OSV-2022-412.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-412

Published

2022-05-17T00:00:31.470478Z

Modified

2022-05-17T00:00:31.470713Z

Summary

Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47464

Crash type: Bad-cast
Crash state:
Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert
upb_strtable_insert
create_fielddef

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47464

Affected packages

OSS-Fuzz / upb

Package

Name: upb
Purl: pkg:generic/upb

Affected ranges

Type: GIT
Repo: https://github.com/protocolbuffers/upb.git
Events: Introduced

1cf8214e4daa1d0dd9777c987697e82c2a3c6584

Fixed

eebcd59a96a126307ddf6d16efe2977e64337ad7

Ecosystem specific

{
    "severity": "HIGH"
}

Database specific

{
    "introduced_range": "c3cfd09b0184bcbdade71a3d788df02c83e897f2:483cea085e11179cffa2a997d910fcc07938668a",
    "fixed_range": "12efc9b096f35b62055a217f45e6b0fe5fb1a099:eebcd59a96a126307ddf6d16efe2977e64337ad7"
}