OSV-2025-447

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/spirv-tools/OSV-2025-447.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-447
Published
2025-06-09T00:05:11.128452Z
Modified
2025-09-24T14:18:33.220549Z
Summary
Use-of-uninitialized-value in spvtools::EmitNumericLiteral
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=423059200

Crash type: Use-of-uninitialized-value
Crash state:
spvtools::EmitNumericLiteral
spvtools::disassemble::InstructionDisassembler::EmitOperand
spvtools::disassemble::InstructionDisassembler::EmitInstructionImpl
References

Affected packages

OSS-Fuzz / spirv-tools

Package

Name
spirv-tools
Purl
pkg:generic/spirv-tools

Affected ranges

Type
GIT
Repo
https://github.com/KhronosGroup/SPIRV-Tools.git
Events
Introduced
6061b72049a037215dfaba87399e1910a97b350e

Affected versions

v2025.*
v2025.3.rc1
v2025.4.rc1
vulkan-sdk-1.*
vulkan-sdk-1.4.321.0

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

introduced_range 
"7dda3c01fb4c0f9941d3cb792947d57d896ac55f:ec1c9ca71ae2e0a63f4245978accde381865266b"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/spirv-tools/OSV-2025-447.yaml"