OSV-2023-1068

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-1068

Published

2023-10-26T13:02:23.112449Z

Modified

2023-10-26T13:02:23.112686Z

Summary

Heap-buffer-overflow in iasecc_parse_size

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63587

Crash type: Heap-buffer-overflow READ 1
Crash state:
iasecc_parse_size
iasecc_parse_get_tlv
iasecc_parse_docp

References

Affected packages

Type: GIT
Repo: https://github.com/OpenSC/OpenSC
Events: Introduced

fa709de8dc5045f390f321cb65c9c73c36d52dd0

Fixed

fbda61d0d276dc98b9d1d1e6810bbd21d19e3859

{
    "severity": "MEDIUM"
}