OSV-2023-467

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/espeak-ng/OSV-2023-467.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-467
Published
2023-06-08T14:01:12.964629Z
Modified
2024-12-12T14:12:48.510389Z
Summary
Stack-buffer-overflow in SetPitchGradient
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59636

Crash type: Stack-buffer-overflow WRITE 1
Crash state:
SetPitchGradient
calc_pitches
CalcPitches
References

Affected packages

OSS-Fuzz / espeak-ng

Package

Name
espeak-ng
Purl
pkg:generic/espeak-ng

Affected ranges

Type
GIT
Repo
https://github.com/espeak-ng/espeak-ng
Events
Introduced
26a675543c63832e37ec780a6c30e49707df1db4
Introduced
7f1222c6ad6a3652be35afbbc980a382076ff0a9

Affected versions

1.*

1.51
1.52.0

Ecosystem specific 

{
    "severity": "HIGH"
}