OSV-2022-886

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/hunspell/OSV-2022-886.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-886
Published
2022-09-12T00:00:26Z
Modified
2022-09-12T00:00:26Z
Summary
Heap-buffer-overflow in SfxEntry::add
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51242

Crash type: Heap-buffer-overflow READ 1
Crash state:
SfxEntry::add
AffixMgr::expand_rootword
SuggestMgr::ngsuggest
References

Affected packages

OSS-Fuzz / hunspell

Package

Name
hunspell
Purl
pkg:generic/hunspell

Affected ranges

Type
GIT
Repo
https://github.com/hunspell/hunspell.git
Events
Introduced
736841ffd4997b73e939595a140addbfd530329c
Fixed
6291cac8fb85a96f7e6d5a35f1912365f3b17ae9

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"a51d7aa0b398f4dc2510f53debdf03c03bec458c:6291cac8fb85a96f7e6d5a35f1912365f3b17ae9"
introduced_range 
"dce0a9af72dfab77f75fab3e675f5a13523d1eb3:74b08bfb8b611b7ae4bea2a6f1f74d9f73c1d0e3"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/hunspell/OSV-2022-886.yaml"