OSV-2023-6

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-6

Published

2023-01-14T13:00:05.918404Z

Modified

2023-01-14T13:00:05.918656Z

Summary

Heap-buffer-overflow in parse_skip_ws

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55035

Crash type: Heap-buffer-overflow READ 1
Crash state:
parse_skip_ws
node_from_openstep
parse_dict_data

References

Affected packages

Type: GIT
Repo: https://github.com/libimobiledevice/libplist
Events: Introduced

491a3acc1015951042c95c389a10634e331818c4

Fixed

47a7fbe438ee7350a2b151e007f07043ef596775

{
    "severity": "HIGH"
}