OSV-2023-72

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/perfetto/OSV-2023-72.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-72
Published
2023-02-18T13:00:15.470143Z
Modified
2023-04-20T22:43:30.312154Z
Summary
Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor
perfetto::trace_processor::TrackEventModule::ParseTracePacketData
perfetto::trace_processor::ProtoTraceParser::ParseTracePacket
References

Affected packages

OSS-Fuzz / perfetto

Package

Name
perfetto
Purl
pkg:generic/perfetto

Affected ranges

Type
GIT
Repo
https://android.googlesource.com/platform/external/perfetto/
Events

Affected versions

android-13.*
android-13.0.0_r1
android-13.0.0_r12
android-13.0.0_r2
android-13.0.0_r3
android-13.0.0_r31
android-13.0.0_r4
android-13.0.0_r5
android-13.0.0_r6
android-13.0.0_r7
android-13.0.0_r8
android-cts-13.*
android-cts-13.0_r1
android-cts-13.0_r2
android-cts-13.0_r3
android-mainline-12.*
android-mainline-12.0.0_r100
android-mainline-12.0.0_r122
android-mainline-12.0.0_r49
android-mainline-12.0.0_r59
android-mainline-12.0.0_r63
android-mainline-12.0.0_r70
android-mainline-12.0.0_r77
android-mainline-12.0.0_r99
android-platform-13.*
android-platform-13.0.0_r1
android-platform-13.0.0_r2
android-security-13.*
android-security-13.0.0_r1
android-security-13.0.0_r2
android-security-13.0.0_r3
android-security-13.0.0_r4
android-vts-13.*
android-vts-13.0_r1
android-vts-13.0_r2
android-vts-13.0_r3
platform-tools-29.*
platform-tools-29.0.1
platform-tools-29.0.2
platform-tools-29.0.3
platform-tools-29.0.4
platform-tools-29.0.5
platform-tools-29.0.6
platform-tools-30.*
platform-tools-30.0.0
platform-tools-30.0.1
platform-tools-30.0.2
platform-tools-30.0.3
platform-tools-30.0.4
platform-tools-30.0.5
platform-tools-31.*
platform-tools-31.0.0
platform-tools-31.0.1
platform-tools-31.0.2
platform-tools-31.0.3
platform-tools-32.*
platform-tools-32.0.0
platform-tools-33.*
platform-tools-33.0.0
platform-tools-33.0.1
platform-tools-33.0.2
platform-tools-33.0.3
platform-tools-33.0.4
platform-tools-34.*
platform-tools-34.0.0
v27.*
v27.0
v27.1
v28.*
v28.0
v29.*
v29.0
v30.*
v30.0
v31.*
v31.0
v32.*
v32.0
v32.1
v32.2

Ecosystem specific

{
    "severity": "HIGH"
}

Database specific

source
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/perfetto/OSV-2023-72.yaml"