OSV-2023-11

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-11

Published

2023-01-18T13:00:13.106298Z

Modified

2023-01-18T13:00:13.106623Z

Summary

Heap-buffer-overflow in node_from_openstep

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55146

Crash type: Heap-buffer-overflow READ 1
Crash state:
node_from_openstep
node_from_openstep
plist_from_openstep

References

Affected packages

Type: GIT
Repo: https://github.com/libimobiledevice/libplist
Events: Introduced

491a3acc1015951042c95c389a10634e331818c4

Fixed

85f5cbd3705b34fcc52009ca51d8167ab18764fa

{
    "severity": "HIGH"
}