OSV-2024-66

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/mruby/OSV-2024-66.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2024-66
Published
2024-02-01T00:13:20.152510Z
Modified
2024-02-14T14:19:50.489803Z
Summary
Heap-buffer-overflow in mrb_memsearch
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66209

Crash type: Heap-buffer-overflow READ 8
Crash state:
mrb_memsearch
str_convert_range
mrb_str_aref
References

Affected packages

OSS-Fuzz / mruby

Package

Name
mruby
Purl
pkg:generic/mruby

Affected ranges

Type
GIT
Repo
https://github.com/mruby/mruby
Events
Introduced
06d9a54760f61846d0d1c12a617c72cf79476abf
Fixed
363f7954320390ac2775ac53f8605b029282ee8e

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "fixed_range": "0e1125c3afe0485f0efae9eda7dd054b9ea92eff:363f7954320390ac2775ac53f8605b029282ee8e"
}