OSV-2022-886

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/hunspell/OSV-2022-886.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-886

Published

2022-09-12T00:00:26.866357Z

Modified

2022-09-12T00:00:26.866618Z

Summary

Heap-buffer-overflow in SfxEntry::add

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51242

Crash type: Heap-buffer-overflow READ 1
Crash state:
SfxEntry::add
AffixMgr::expand_rootword
SuggestMgr::ngsuggest

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51242

Affected packages

OSS-Fuzz / hunspell

Package

Name: hunspell
Purl: pkg:generic/hunspell

Affected ranges

Type: GIT
Repo: https://github.com/hunspell/hunspell.git
Events: Introduced

736841ffd4997b73e939595a140addbfd530329c

Fixed

6291cac8fb85a96f7e6d5a35f1912365f3b17ae9

Ecosystem specific

{
    "severity": "MEDIUM"
}

Database specific

{
    "introduced_range": "dce0a9af72dfab77f75fab3e675f5a13523d1eb3:74b08bfb8b611b7ae4bea2a6f1f74d9f73c1d0e3",
    "fixed_range": "a51d7aa0b398f4dc2510f53debdf03c03bec458c:6291cac8fb85a96f7e6d5a35f1912365f3b17ae9"
}