OSV-2022-93

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libplist/OSV-2022-93.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-93
Published
2022-01-27T00:00:50.546211Z
Modified
2022-04-13T03:04:39.865451Z
Summary
Heap-buffer-overflow in strtol
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44089

Crash type: Heap-buffer-overflow READ 2
Crash state:
strtol
parse_primitive
plist_from_json
References

Affected packages

OSS-Fuzz / libplist

Package

Name
libplist
Purl
pkg:generic/libplist

Affected ranges

Type
GIT
Repo
https://github.com/libimobiledevice/libplist
Events
Introduced
7e45a2ee6e407d36374eb6c3d5196e768c246115
Fixed
8ea84caa3cba801c4f240648a6b7919e9b3e0b0d

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libplist/OSV-2022-93.yaml"