OSV-2025-593
See a problem?- Import Source
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2025-593.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/OSV-2025-593
- Published
- 2025-08-02T00:16:19.626747Z
- Modified
- 2025-12-20T14:30:42.818260Z
- Summary
- Heap-buffer-overflow in mmcall
- Details
-
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435479026
Crash type: Heap-buffer-overflow WRITE 8 Crash state: mmcall lj_meta_tget lj_vmeta_tgetv - References
Affected packages
OSS-Fuzz / tarantool
Package
- Name
- tarantool
- Purl
- pkg:generic/tarantool
Affected versions
3.*
3.3.0
3.3.1
3.3.1-entrypoint
3.3.2
3.3.2-entrypoint
3.3.3
3.3.3-entrypoint
3.3.4
3.3.4-entrypoint
3.3.5-entrypoint
3.4.0
3.4.0-entrypoint
3.4.1
3.4.1-entrypoint
3.4.2
3.4.2-entrypoint
3.4.3-entrypoint
3.5.0
3.5.0-entrypoint
3.5.1
3.5.1-entrypoint
3.5.2-entrypoint
3.6.0
3.6.0-entrypoint
3.6.1-entrypoint
3.7.0-entrypoint
Database specific
fixed_range
"83e12796838a74739ba35c740b0e21a442796ec7:dc969d16f6467569f4aa9dc124a31f023b803c22"
introduced_range
"b33f17b25de6bcbe3ebc236250976e4a0250e75e:c10c62927e4cba52cfc44103fc1e21c9d6606fb2"
source
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2025-593.yaml"