OSV-2025-890

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libical/OSV-2025-890.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-890
Published
2025-11-10T00:03:23.954817Z
Modified
2025-11-10T00:03:23.955223Z
Summary
Heap-buffer-overflow in icalmemory_tmp_copy
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=458943970

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
icalmemory_tmp_copy
icalreqstattype_from_string
icalvalue_new_from_string
References

Affected packages

OSS-Fuzz / libical

Package

Name
libical
Purl
pkg:generic/libical

Affected ranges

Type
GIT
Repo
https://github.com/libical/libical.git
Events
Introduced
1d7bd24caf33d607c0863dceb83ccb5cfd54fb91
Fixed
130581f5cdb6501da8533b7bd3cae92eb01ea18a

Ecosystem specific 

{
    "severity": "HIGH"
}