OSV-2025-1020
See a problem?- Import Source
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2025-1020.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/OSV-2025-1020
- Published
- 2025-12-25T00:17:49Z
- Modified
- 2026-09-13T14:37:29Z
- Summary
- Heap-buffer-overflow in mmcall
- Details
-
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=471093652
Crash type: Heap-buffer-overflow WRITE 8 Crash state: mmcall lj_meta_tset lj_vmeta_tsetv - References
Affected packages
OSS-Fuzz / tarantool
Package
- Name
- tarantool
- Purl
- pkg:generic/tarantool
Affected versions
3.*
3.5.0
3.5.1
3.5.1-entrypoint
3.5.2
3.5.2-entrypoint
3.5.3-entrypoint
3.6.0
3.6.0-entrypoint
3.6.1
3.6.1-entrypoint
3.6.2
3.6.2-entrypoint
3.6.3
3.6.3-entrypoint
3.6.4
3.6.4-entrypoint
3.7.0
3.7.0-entrypoint
3.7.1
3.7.1-entrypoint
3.7.2-entrypoint
3.8.0
3.8.0-entrypoint
3.8.1
3.8.1-entrypoint
3.8.2-entrypoint
3.9.0-entrypoint