OSV-2023-357

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-357

Published

2023-05-01T14:01:05.606039Z

Modified

2023-05-01T14:01:05.606339Z

Summary

Heap-buffer-overflow in flac__analyze_frame

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58481

Crash type: Heap-buffer-overflow READ 4
Crash state:
flac__analyze_frame
write_callback
write_audio_frame_to_client_

References

Affected packages

Type: GIT
Repo: https://github.com/xiph/flac.git
Events: Introduced

21ffc935f052005c616fdbcdc4cf1925e746028a

Fixed

183b22ac320c5e59f1d14b0fda395cecad38b932

{
    "severity": "MEDIUM"
}