OSV-2023-221

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-221

Published

2023-03-24T13:00:26.024981Z

Modified

2023-03-24T13:00:26.025239Z

Summary

Heap-use-after-free in flac__analyze_frame

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57354

Crash type: Heap-use-after-free READ 4
Crash state:
flac__analyze_frame
write_callback
write_audio_frame_to_client_

References

Affected packages

Type: GIT
Repo: https://github.com/xiph/flac.git
Events: Introduced

383512d551de2ebf640a95d010b38ad58b0d12ae

Fixed

147cfc8df424b3b4fe6cc15a37d8ab9f3320dcd6

{
    "severity": "HIGH"
}