OSV-2023-1115

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libecc/OSV-2023-1115.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-1115
Published
2023-11-05T13:01:21.842426Z
Modified
2023-11-05T13:01:21.842714Z
Summary
Use-of-uninitialized-value in fp_uninit
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63867

Crash type: Use-of-uninitialized-value
Crash state:
fp_uninit
cryptofuzz::module::libecc::OpECC_ValidatePubkey
cryptofuzz::ExecutorBase<bool, cryptofuzz::operation::ECC_ValidatePubkey>::callM
References

Affected packages

OSS-Fuzz / libecc

Package

Name
libecc
Purl
pkg:generic/libecc

Affected ranges

Type
GIT
Repo
https://github.com/libecc/libecc.git
Events
Introduced
b9329e2826f4d622dbb9ffdd9316e98fda7a023f
Fixed
b9329e2826f4d622dbb9ffdd9316e98fda7a023f

Ecosystem specific 

{
    "severity": "MEDIUM"
}