OSV-2024-17

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2024-17

Published

2024-01-17T00:12:20.698997Z

Modified

2024-04-05T14:21:32.049652Z

Summary

Heap-use-after-free in iasecc_delete_file

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65684

Crash type: Heap-use-after-free READ 4
Crash state:
iasecc_delete_file
sc_delete_file
iasecc_pkcs15_delete_file

References

Affected packages

Type: GIT
Repo: https://github.com/OpenSC/OpenSC
Events: Introduced

773fcc6bd0d047aa629dd297e87244ca3add5b16

Fixed

c3545018d059b4debde33b9f34de719dd41e5531

{
    "severity": "HIGH"
}

{
    "fixed_range": "773fcc6bd0d047aa629dd297e87244ca3add5b16:c3545018d059b4debde33b9f34de719dd41e5531"
}