OSV-2026-655
See a problem?- Import Source
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2026-655.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/OSV-2026-655
- Published
- 2026-04-30T00:17:44Z
- Modified
- 2026-10-21T23:30:03Z
- Summary
- Heap-buffer-overflow in lj_record_idx
- Details
-
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=507646002
Crash type: Heap-buffer-overflow WRITE 8 Crash state: lj_record_idx lj_record_ins trace_state - References
Affected packages
OSS-Fuzz / tarantool
Package
- Name
- tarantool
- Purl
- pkg:generic/tarantool
Affected versions
3.*
3.7.0
3.7.1
3.7.1-entrypoint
3.7.2-entrypoint
3.8.0
3.8.0-entrypoint
3.8.1
3.8.1-entrypoint
3.8.2-entrypoint
3.9.0-entrypoint
Database specific
fixed_range
"d3c3c5f938a3c457566d71332d5a45db64495141:63d9f01e339f4da711b37bc754199e59ac7216be"
introduced_range
"83e12796838a74739ba35c740b0e21a442796ec7:dc969d16f6467569f4aa9dc124a31f023b803c22"
source
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2026-655.yaml"