OSV-2025-81

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2025-81.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-81
Published
2025-02-02T00:02:52.946833Z
Modified
2025-02-02T00:02:52.947083Z
Summary
Segv on unknown address in ndpi_serialize_string_string
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393404264

Crash type: Segv on unknown address
Crash state:
ndpi_serialize_string_string
ndpi_dpi2json
fuzz_process_packet.c
References

Affected packages

OSS-Fuzz / ndpi

Package

Name
ndpi
Purl
pkg:generic/ndpi

Affected ranges

Type
GIT
Repo
https://github.com/ntop/nDPI.git
Events
Introduced
aacade6d9571bdf6fc9bd0b5cbbafb65d5123f8f
Fixed
41133638dc303be1717462876814a6102669757c
Fixed
5424d144242c5b85176465acb7376237d80c6d91

Ecosystem specific 

{
    "severity": null
}

Database specific

introduced_range

"dd4be0a9e067e5a8f41e62a17b11d6a8c7450810:fcff6d5abb168c3318c019fc140ce1e809b40d2b"

fixed_range

"fcff6d5abb168c3318c019fc140ce1e809b40d2b:5424d144242c5b85176465acb7376237d80c6d91"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2025-81.yaml"