OSV-2024-965

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/flac/OSV-2024-965.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2024-965
Published
2024-08-16T00:14:23.665242Z
Modified
2024-08-16T00:14:23.665768Z
Summary
Stack-buffer-overflow in FLAC__stream_encoder_init_ogg_file
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537419

Crash type: Stack-buffer-overflow READ 13
Crash state:
FLAC__stream_encoder_init_ogg_file
EncoderSession_init_encoder
flac__encode_file
References

Affected packages

OSS-Fuzz / flac

Package

Name
flac
Purl
pkg:generic/flac

Affected ranges

Type
GIT
Repo
https://github.com/xiph/flac.git
Events

Ecosystem specific

{
    "severity": "MEDIUM"
}

Database specific

{
    "introduced_range": "215d1aa633b218ae16bfc1b09aed6f3f7a22d19e:ce9105664419f542c757c05b28ffd6537d19f63c"
}