OSV-2024-20

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/htslib/OSV-2024-20.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2024-20
Published
2024-01-19T00:05:05.917557Z
Modified
2024-04-29T11:28:16.496002Z
Summary
Heap-buffer-overflow in bam_aux_get
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65820

Crash type: Heap-buffer-overflow READ 1
Crash state:
bam_aux_get
process_one_read
cram_encode_container
References

Affected packages

OSS-Fuzz / htslib

Package

Name
htslib
Purl
pkg:generic/htslib

Affected ranges

Type
GIT
Repo
https://github.com/samtools/htslib.git
Events
Introduced
9e1ffd856614fcfc0bb3b89501600827cc8705e7
Fixed
b08332d60a458f64ad4186dbe137ef528881c683

Affected versions

1.*
1.19

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"31e5a5f972b137ec3738bfd565652270904f7112:b08332d60a458f64ad4186dbe137ef528881c683"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/htslib/OSV-2024-20.yaml"