OSV-2023-225

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/sleuthkit/OSV-2023-225.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-225
Published
2023-03-24T13:02:18.004510Z
Modified
2023-08-30T14:14:16.149541Z
Summary
Heap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57364

Crash type: Heap-buffer-overflow READ 2
Crash state:
std::__1::enable_if&lt;true, void>::type APFSBtreeNodeIterator&lt;APFSBtreeNode&lt;apfs_o
APFSBtreeNodeIterator&lt;APFSBtreeNode&lt;apfs_omap_key, apfs_omap_value> >::APFSBtree
APFSBtreeNodeIterator&lt;APFSBtreeNode&lt;apfs_omap_key, apfs_omap_value> > APFSBtreeN
References

Affected packages

OSS-Fuzz / sleuthkit

Package

Name
sleuthkit
Purl
pkg:generic/sleuthkit

Affected ranges

Type
GIT
Repo
https://github.com/sleuthkit/sleuthkit
Events
Introduced
69cec8222562293935b4d1befc693407378b92d0

Affected versions

sleuthkit-4.*

sleuthkit-4.12.0
sleuthkit-4.12.1

Ecosystem specific 

{
    "severity": "MEDIUM"
}