OSV-2023-182

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-182

Published

2023-03-16T13:02:02.851218Z

Modified

2023-03-16T13:02:02.851471Z

Summary

Heap-buffer-overflow in FLAC__bitwriter_write_rice_signed_block

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57071

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
FLAC__bitwriter_write_rice_signed_block
add_residual_partitioned_rice_
FLAC__subframe_add_fixed

References

Affected packages

Type: GIT
Repo: https://github.com/xiph/flac.git
Events: Introduced

3173fc064f639535b5b74bdbf0fb683edf166c55

Fixed

68f605bd281a37890ed696555a52c6180457164f

{
    "severity": "HIGH"
}

{
    "introduced_range": "2db6c1d138bd39a366cbba4591321df8d58a7cf5:4d21da118322af1c0033f1bd5ea18d86b58b49d4"
}