OSV-2025-447

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/https:/github.com/KhronosGroup/SPIRV-Tools.git/OSV-2025-447.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-447
Published
2025-06-09T00:05:11Z
Modified
2026-10-20T17:25:41Z
Summary
Use-of-uninitialized-value in spvtools::EmitNumericLiteral
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=423059200

Crash type: Use-of-uninitialized-value
Crash state:
spvtools::EmitNumericLiteral
spvtools::disassemble::InstructionDisassembler::EmitOperand
spvtools::disassemble::InstructionDisassembler::EmitInstructionImpl
References

Affected packages

OSS-Fuzz / spirv-tools

Package

Name
spirv-tools
Purl
pkg:generic/spirv-tools

Affected ranges

Type
GIT
Repo
https://github.com/KhronosGroup/SPIRV-Tools.git
Events
Introduced
6061b72049a037215dfaba87399e1910a97b350e

Affected versions

v2025.*
v2025.3
v2025.3.rc1
v2025.4
v2025.4.rc1
v2025.5
v2025.5.rc1
v2026.*
v2026.1
v2026.1.rc1
v2026.2
v2026.2.rc1
v2026.2.rc2
v2026.3
v2026.3.rc1
v2026.4
v2026.4.rc1
v2026.4.rc2
vulkan-sdk-1.*
vulkan-sdk-1.4.321.0
vulkan-sdk-1.4.328.0
vulkan-sdk-1.4.328.1
vulkan-sdk-1.4.335.0
vulkan-sdk-1.4.341.0
vulkan-sdk-1.4.350.0
vulkan-sdk-1.4.350.1
vulkan-sdk-1.4.357.0
vulkan-sdk-1.4.363.0

Ecosystem specific 

{
    "severity":  "MEDIUM"
}

Database specific

introduced_range 
"7dda3c01fb4c0f9941d3cb792947d57d896ac55f:ec1c9ca71ae2e0a63f4245978accde381865266b"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/https:/github.com/KhronosGroup/SPIRV-Tools.git/OSV-2025-447.yaml"