OSV-2024-20

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2024-20

Published

2024-01-19T00:05:05.917557Z

Modified

2024-04-29T11:28:16.496002Z

Summary

Heap-buffer-overflow in bam_aux_get

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65820

Crash type: Heap-buffer-overflow READ 1
Crash state:
bam_aux_get
process_one_read
cram_encode_container

References

Affected packages

Type: GIT
Repo: https://github.com/samtools/htslib.git
Events: Introduced

9e1ffd856614fcfc0bb3b89501600827cc8705e7

Fixed

b08332d60a458f64ad4186dbe137ef528881c683

1.19

{
    "severity": "MEDIUM"
}

{
    "fixed_range": "31e5a5f972b137ec3738bfd565652270904f7112:b08332d60a458f64ad4186dbe137ef528881c683"
}