OSV-2025-1020

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2025-1020.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-1020
Published
2025-12-25T00:17:49Z
Modified
2026-10-21T22:30:04Z
Summary
Heap-buffer-overflow in mmcall
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=471093652

Crash type: Heap-buffer-overflow WRITE 8
Crash state:
mmcall
lj_meta_tset
lj_vmeta_tsetv
References

Affected packages

OSS-Fuzz / tarantool

Package

Name
tarantool
Purl
pkg:generic/tarantool

Affected ranges

Type
GIT
Repo
https://github.com/tarantool/tarantool
Events
Introduced
8c7cfb1cd0b3f5ce1d5b181403f68f7aaf657d9a
Fixed
63d9f01e339f4da711b37bc754199e59ac7216be

Affected versions

3.*
3.5.0
3.5.1
3.5.1-entrypoint
3.5.2
3.5.2-entrypoint
3.5.3-entrypoint
3.6.0
3.6.0-entrypoint
3.6.1
3.6.1-entrypoint
3.6.2
3.6.2-entrypoint
3.6.3
3.6.3-entrypoint
3.6.4
3.6.4-entrypoint
3.7.0
3.7.0-entrypoint
3.7.1
3.7.1-entrypoint
3.7.2-entrypoint
3.8.0
3.8.0-entrypoint
3.8.1
3.8.1-entrypoint
3.8.2-entrypoint
3.9.0-entrypoint

Ecosystem specific 

{
    "severity":  "HIGH"
}

Database specific

fixed_range 
"d3c3c5f938a3c457566d71332d5a45db64495141:63d9f01e339f4da711b37bc754199e59ac7216be"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2025-1020.yaml"