OSV-2023-542

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/jsign/OSV-2023-542.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-542
Published
2023-07-03T14:02:09.091932Z
Modified
2023-07-03T14:02:09.092172Z
Summary
Security exception in net.jsign.appx.Zip64EndOfCentralDirectoryRecord.read
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60308

Crash type: Security exception
Crash state:
net.jsign.appx.Zip64EndOfCentralDirectoryRecord.read
net.jsign.appx.CentralDirectory.read
net.jsign.appx.ZipFile.<init>
References

Affected packages

OSS-Fuzz / jsign

Package

Name
jsign
Purl
pkg:generic/jsign

Affected ranges

Type
GIT
Repo
https://github.com/ebourg/jsign.git
Events
Introduced
65fea7237f17973b08cd65144e85a34d114f2030
Fixed
76956c731089e01fadf236bf9ad4ce2f85c7f305

Ecosystem specific 

{
    "severity": "LOW"
}

Database specific 

{
    "fixed_range": "1cdad22785de7456575e99bac70bc1ea30768722:76956c731089e01fadf236bf9ad4ce2f85c7f305"
}