OSV-2023-899

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-899

Published

2023-09-23T14:00:56.859961Z

Modified

2023-09-23T14:00:56.860254Z

Summary

Heap-buffer-overflow in cosm_create_key

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62613

Crash type: Heap-buffer-overflow READ 1
Crash state:
cosm_create_key
sc_pkcs15init_generate_key
do_generate_key

References

Affected packages

Type: GIT
Repo: https://github.com/OpenSC/OpenSC
Events: Introduced

22f73781706a293d10ebe982ece863a73fd62bf3

Fixed

41d61da8481582e12710b5858f8b635e0a71ab5e

{
    "severity": "MEDIUM"
}