OSV-2024-1320

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2024-1320

Published

2024-11-17T00:15:09.627790Z

Modified

2024-11-17T00:15:09.628193Z

Summary

Heap-buffer-overflow in process_page_

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379254072

Crash type: Heap-buffer-overflow READ 4
Crash state:
process_page_
FLAC__ogg_decoder_aspect_skip_link
FLAC__stream_decoder_seek_absolute

References

Affected packages

Type: GIT
Repo: https://github.com/xiph/flac.git
Events: Introduced

17811b3af605b25a10393547479dd1424ae0ccd1

Fixed

e3a7157b7415c8c7221ac7f05da1c54a8047d183

{
    "severity": "MEDIUM"
}