OSV-2022-563

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-563

Published

2022-07-10T00:01:51.341319Z

Modified

2022-07-10T00:01:51.341599Z

Summary

Use-of-uninitialized-value in LZ4HC_compress_generic_noDictCtx

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48910

Crash type: Use-of-uninitialized-value
Crash state:
LZ4HC_compress_generic_noDictCtx
LZ4_compress_HC_extStateHC_fastReset
LZ4F_compressBlockHC

References

Affected packages

Type: GIT
Repo: https://github.com/lz4/lz4.git
Events: Introduced

0ac3c74de1b6de584c361f3e9485dde35f10c756

Fixed

910ec80d2856cfa825e2230ff2de8347a4fa4522

{
    "severity": "MEDIUM"
}