OSV-2024-1346

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/shaderc/OSV-2024-1346.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2024-1346

Published

2024-12-10T00:00:20.380006Z

Modified

2025-12-23T15:50:59.553872Z

Summary

UNKNOWN READ in glslang::HlslTokenStream::advanceToken

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382547706

Crash type: UNKNOWN READ
Crash state:
glslang::HlslTokenStream::advanceToken
glslang::HlslGrammar::acceptLiteral
glslang::HlslGrammar::acceptPostfixExpression

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382547706

Affected packages

OSS-Fuzz / shaderc

Package

Name: shaderc
Purl: pkg:generic/shaderc

Affected ranges

Type: GIT
Repo: https://github.com/google/shaderc
Events: Introduced

ffd3be52bbcbd428e9de40da996ad09645fc0dc8

Fixed

e0a5092b4b05dbcc448b0883f3575163634f8e86

Affected versions

v2024.*

v2024.4

v2025.*

v2025.1

v2025.2

v2025.3

v2025.4

v2025.5

Ecosystem specific

{
    "severity": "MEDIUM"
}

Database specific

introduced_range

"8c4d729001709e907fba57041749d9ed8985891c:082a73bfa9088bd3da35734023a9167ba92aae6c"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/shaderc/OSV-2024-1346.yaml"