OSV-2024-137

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/igraph/OSV-2024-137.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2024-137
Published
2024-02-27T00:01:01.786536Z
Modified
2024-04-03T14:17:44.548648Z
Summary
Global-buffer-overflow in igraph_dl_yylex
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66992

Crash type: Global-buffer-overflow READ 2
Crash state:
igraph_dl_yylex
igraph_dl_yyparse
igraph_read_graph_dl
References

Affected packages

OSS-Fuzz / igraph

Package

Name
igraph
Purl
pkg:generic/igraph

Affected ranges

Type
GIT
Repo
https://github.com/igraph/igraph
Events
Introduced
74b2e25f02b82b583ee6c38c52e024337571f443
Fixed
3d19cd132ca57040c6680b54c45a014c9f0f0ea7

Ecosystem specific 

{
    "severity": null
}

Database specific

fixed_range 
"4fcf6190e4d7cfc02a891c0ed08a1bc97e45299e:3d19cd132ca57040c6680b54c45a014c9f0f0ea7"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/igraph/OSV-2024-137.yaml"