OSV-2024-74

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2024-74

Published

2024-02-04T00:02:45.988846Z

Modified

2024-04-29T11:31:45.626304Z

Summary

Heap-buffer-overflow in hts_log

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66369

Crash type: Heap-buffer-overflow READ {*}
Crash state:
hts_log
process_one_read
cram_encode_container

References

Affected packages

Type: GIT
Repo: https://github.com/samtools/htslib.git
Events: Introduced

9e1ffd856614fcfc0bb3b89501600827cc8705e7

Fixed

7278dabf370f5bb18b02c8fbbbf15ad59ce6712c

1.19

1.19.1

{
    "severity": "MEDIUM"
}

{
    "fixed_range": "65ae5744347c9403c061585fa2fc9f5262f2f977:7278dabf370f5bb18b02c8fbbbf15ad59ce6712c"
}