vuln-osv update 2026-11-11T18:46:30Z
This commit is contained in:
Vulnerability Bot
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"OSV-2021-1070","published":"2021-07-29T00:01:10.187569Z","modified":"2026-11-09T14:30:04.965987346Z","summary":"Heap-buffer-overflow in ZSTD_decompressBlock_internal","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nZSTD_decompressBlock_internal\nZSTD_decompressMultiFrame\nZSTD_decompressDCtx\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"861ba79f31393dec0a0782ca11cf32cebb6f6610"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1070.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2021-1070","published":"2021-07-29T00:01:10.187569Z","modified":"2026-11-11T14:30:03.340554694Z","summary":"Heap-buffer-overflow in ZSTD_decompressBlock_internal","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nZSTD_decompressBlock_internal\nZSTD_decompressMultiFrame\nZSTD_decompressDCtx\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"861ba79f31393dec0a0782ca11cf32cebb6f6610"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1070.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623"}]}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"OSV-2021-1672","published":"2021-12-12T00:01:29.747137Z","modified":"2026-11-09T14:30:04.967390122Z","summary":"Heap-buffer-overflow in blosc_d","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nblosc_d\ndo_job\nblosc_run_decompression_with_context\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1672.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2021-1672","published":"2021-12-12T00:01:29.747137Z","modified":"2026-11-11T14:30:03.341943960Z","summary":"Heap-buffer-overflow in blosc_d","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nblosc_d\ndo_job\nblosc_run_decompression_with_context\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1672.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"OSV-2021-820","published":"2021-06-02T00:00:31.619765Z","modified":"2026-10-28T15:45:09.151266043Z","summary":"UNKNOWN READ in virtio_gpu_disable_scanout","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34831\n\n```\nCrash type: UNKNOWN READ\nCrash state:\nvirtio_gpu_disable_scanout\nvirtio_gpu_set_scanout\nvirtio_gpu_simple_process_cmd\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"e64d4b6a9bc3ba216a988276bcdc27d06fd48e59"}]}],"versions":["v6.1.0-rc0","v6.1.0-rc1","v6.1.0-rc2","v6.1.0-rc3","v6.1.0-rc4","v6.1.0","v6.1.1","v6.2.0","v6.2.0-rc0","v6.2.0-rc1","v6.2.0-rc3","v6.2.0-rc4","v7.0.0","v7.0.0-rc0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.1.0","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v7.2.1","v8.0.0-rc3","v8.0.0-rc4","v8.0.0","v7.2.2","v7.2.3","v8.0.1","v8.0.2","v7.2.4","v8.0.3","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v7.2.5","v8.0.4","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3","v6.2.0-rc2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2021-820.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34831"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2021-820","published":"2021-06-02T00:00:31.619765Z","modified":"2026-11-11T15:00:08.495631556Z","summary":"UNKNOWN READ in virtio_gpu_disable_scanout","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34831\n\n```\nCrash type: UNKNOWN READ\nCrash state:\nvirtio_gpu_disable_scanout\nvirtio_gpu_set_scanout\nvirtio_gpu_simple_process_cmd\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"e64d4b6a9bc3ba216a988276bcdc27d06fd48e59"}]}],"versions":["v6.1.0-rc0","v6.1.0-rc1","v6.1.0-rc2","v6.1.0-rc3","v6.1.0-rc4","v6.1.0","v6.1.1","v6.2.0","v6.2.0-rc0","v6.2.0-rc1","v6.2.0-rc3","v6.2.0-rc4","v7.0.0","v7.0.0-rc0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.1.0","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v7.2.1","v8.0.0-rc3","v8.0.0-rc4","v8.0.0","v7.2.2","v7.2.3","v8.0.1","v8.0.2","v7.2.4","v8.0.3","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v7.2.5","v8.0.4","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3","v11.2.0-rc0","v6.2.0-rc2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2021-820.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34831"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"OSV-2022-1134","published":"2022-11-04T00:02:11.463429Z","modified":"2026-11-09T14:30:04.965661082Z","summary":"Heap-buffer-overflow in ndlz8_decompress","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nndlz8_decompress\nblosc_d\ndo_job\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"1c9795f2e3e04a79f13d9e7658e6d6e47dfe1cc4"}]}],"versions":["v2.0.0","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2022-1134.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2022-1134","published":"2022-11-04T00:02:11.463429Z","modified":"2026-11-11T14:30:03.340465029Z","summary":"Heap-buffer-overflow in ndlz8_decompress","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nndlz8_decompress\nblosc_d\ndo_job\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"1c9795f2e3e04a79f13d9e7658e6d6e47dfe1cc4"}]}],"versions":["v2.0.0","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2022-1134.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967"}]}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"OSV-2022-581","published":"2022-07-14T00:00:45.644503Z","modified":"2026-10-28T16:45:04.382621645Z","summary":"Heap-buffer-overflow in megasas_map_sgl","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nmegasas_map_sgl\nmegasas_mmio_write\nmegasas_port_write\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"0e042025b9fe262316f29e4b8ec47f0b85c24e5f"}]}],"versions":["v6.2.0","v6.2.0-rc0","v6.2.0-rc1","v6.2.0-rc3","v6.2.0-rc4","v7.0.0","v7.0.0-rc0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v7.2.1","v8.0.0-rc3","v8.0.0-rc4","v8.0.0","v7.2.2","v7.2.3","v8.0.1","v8.0.2","v7.2.4","v8.0.3","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v7.2.5","v8.0.4","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3","v6.2.0-rc2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2022-581.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2022-581","published":"2022-07-14T00:00:45.644503Z","modified":"2026-11-11T15:00:08.496704178Z","summary":"Heap-buffer-overflow in megasas_map_sgl","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nmegasas_map_sgl\nmegasas_mmio_write\nmegasas_port_write\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"0e042025b9fe262316f29e4b8ec47f0b85c24e5f"}]}],"versions":["v6.2.0","v6.2.0-rc0","v6.2.0-rc1","v6.2.0-rc3","v6.2.0-rc4","v7.0.0","v7.0.0-rc0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v7.2.1","v8.0.0-rc3","v8.0.0-rc4","v8.0.0","v7.2.2","v7.2.3","v8.0.1","v8.0.2","v7.2.4","v8.0.3","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v7.2.5","v8.0.4","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3","v11.2.0-rc0","v6.2.0-rc2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2022-581.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.1","id":"OSV-2022-608","published":"2022-07-21T00:01:50.967627Z","modified":"2026-10-19T14:36:05.338864Z","summary":"Heap-use-after-free in jxl::WriteToPixelCallbackStage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277\n\n```\nCrash type: Heap-use-after-free READ 4\nCrash state:\njxl::WriteToPixelCallbackStage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"eafb38fb4f3d2e00f9402a0c09ac592ebfd6a795"}]}],"versions":["v0.7-base","v0.7rc","v0.7.0","v1.0-snapshot","v0.8-snapshot","v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.7.1","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.7.2","v0.7.3","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-608.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2022-608","published":"2022-07-21T00:01:50.967627Z","modified":"2026-11-11T14:30:03.783789743Z","summary":"Heap-use-after-free in jxl::WriteToPixelCallbackStage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277\n\n```\nCrash type: Heap-use-after-free READ 4\nCrash state:\njxl::WriteToPixelCallbackStage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"eafb38fb4f3d2e00f9402a0c09ac592ebfd6a795"}]}],"versions":["v0.7-base","v0.7rc","v0.7.0","v1.0-snapshot","v0.8-snapshot","v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.7.1","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.7.2","v0.7.3","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0","v0.13.0"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-608.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277"}]}
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.1","id":"OSV-2022-725","published":"2022-08-18T00:01:05.918943Z","modified":"2026-10-19T14:39:23.329486Z","summary":"Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\njxl::N_EMU128::WriteToU8Stage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"a50e71631cabfbdd57d540ba080ecec19b4664af"}]}],"versions":["v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-725.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2022-725","published":"2022-08-18T00:01:05.918943Z","modified":"2026-11-11T14:30:03.783986990Z","summary":"Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\njxl::N_EMU128::WriteToU8Stage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"a50e71631cabfbdd57d540ba080ecec19b4664af"}]}],"versions":["v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0","v0.13.0"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-725.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"OSV-2023-1350","published":"2023-12-23T00:12:38.562149Z","modified":"2026-11-09T14:30:05.750542198Z","summary":"Heap-buffer-overflow in inflate","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ninflate\nuncompress2\nuncompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"e6035df1d3f285af9a2e756fb428633eb7898881"}]}],"versions":["v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-1350.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2023-1350","published":"2023-12-23T00:12:38.562149Z","modified":"2026-11-11T14:45:02.966375985Z","summary":"Heap-buffer-overflow in inflate","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ninflate\nuncompress2\nuncompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"e6035df1d3f285af9a2e756fb428633eb7898881"}]}],"versions":["v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-1350.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236"}]}
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"OSV-2023-319","published":"2023-04-16T14:01:58.406534Z","modified":"2026-11-09T14:30:05.562634892Z","summary":"Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nZSTD_decompressSequencesLong_bmi2\nZSTD_decompressSequencesLong\nZSTD_decompressBlock_internal\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-319.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2023-319","published":"2023-04-16T14:01:58.406534Z","modified":"2026-11-11T14:45:03.997155309Z","summary":"Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nZSTD_decompressSequencesLong_bmi2\nZSTD_decompressSequencesLong\nZSTD_decompressBlock_internal\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-319.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"OSV-2023-390","published":"2023-05-12T14:00:08.854823Z","modified":"2026-10-28T18:00:04.475452004Z","summary":"Heap-buffer-overflow in sdhci_write","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\nsdhci_write\nmemory_region_write_accessor\nmemory_region_dispatch_write\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"b7a3a705b644495b7b578e94e0e9dedf93c4f661"}]}],"versions":["v7.0.0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.2.0","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.1","v7.2.2","v7.2.3","v7.2.4","v7.2.5","v8.0.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v8.0.0-rc3","v8.0.0-rc4","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2023-390.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2023-390","published":"2023-05-12T14:00:08.854823Z","modified":"2026-11-11T15:15:02.464482268Z","summary":"Heap-buffer-overflow in sdhci_write","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\nsdhci_write\nmemory_region_write_accessor\nmemory_region_dispatch_write\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"b7a3a705b644495b7b578e94e0e9dedf93c4f661"}]}],"versions":["v7.0.0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.2.0","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.1","v7.2.2","v7.2.3","v7.2.4","v7.2.5","v8.0.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v8.0.0-rc3","v8.0.0-rc4","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3","v11.2.0-rc0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2023-390.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"OSV-2023-606","published":"2023-07-23T14:01:02.159160Z","modified":"2026-11-09T14:45:02.591999133Z","summary":"Heap-buffer-overflow in ZSTD_decompressMultiFrame","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778\n\n```\nCrash type: Heap-buffer-overflow READ {*}\nCrash state:\nZSTD_decompressMultiFrame\nZSTD_decompress_usingDDict\nzstd_wrap_decompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-606.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2023-606","published":"2023-07-23T14:01:02.159160Z","modified":"2026-11-11T14:45:02.976646279Z","summary":"Heap-buffer-overflow in ZSTD_decompressMultiFrame","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778\n\n```\nCrash type: Heap-buffer-overflow READ {*}\nCrash state:\nZSTD_decompressMultiFrame\nZSTD_decompress_usingDDict\nzstd_wrap_decompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-606.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.1","id":"OSV-2024-914","published":"2024-08-16T00:08:20.277708Z","modified":"2026-10-19T15:13:03.724140Z","summary":"UNKNOWN READ in boost::re_detail_500::basic_regex_formatter<std::__1::ostream_iterator<char, cha","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66851\n\n```\nCrash type: UNKNOWN READ\nCrash state:\nboost::re_detail_500::basic_regex_formatter<std::__1::ostream_iterator<char, cha\nboost::re_detail_500::basic_regex_formatter<std::__1::ostream_iterator<char, cha\nstd::__1::ostream_iterator<char, char, std::__1::char_traits<char> > boost::re_d\n```\n","affected":[{"package":{"name":"boost","ecosystem":"OSS-Fuzz","purl":"pkg:generic/boost"},"ranges":[{"type":"GIT","repo":"https://github.com/boostorg/boost.git","events":[{"introduced":"9072bfc2d969ca1e8c49651232817201e05e3eae"},{"introduced":"206cf016ae9454ed65e9c5faf4a322f31444fb80"}]}],"versions":["boost-1.85.0","boost-1.85.0.beta1","boost-1.86.0","boost-1.86.0.beta1","boost-1.87.0.beta1","boost-1.87.0","boost-1.88.0.beta1","boost-1.88.0","boost-1.89.0.beta1","boost-1.89.0","boost-1.90.0.beta1","boost-1.90.0","boost-1.91.0.beta1","boost-1.91.0","boost-1.91.0-1","boost-1.92.0.beta1","boost-1.92.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"0251e5fa19564439f3d654df8d4de1abdbaa72b2:9f83dd55ea67f1bab62c20d29bc5527345aafc55","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/boost/OSV-2024-914.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66851"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2024-914","published":"2024-08-16T00:08:20.277708Z","modified":"2026-11-11T14:45:03.240800794Z","summary":"UNKNOWN READ in boost::re_detail_500::basic_regex_formatter<std::__1::ostream_iterator<char, cha","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66851\n\n```\nCrash type: UNKNOWN READ\nCrash state:\nboost::re_detail_500::basic_regex_formatter<std::__1::ostream_iterator<char, cha\nboost::re_detail_500::basic_regex_formatter<std::__1::ostream_iterator<char, cha\nstd::__1::ostream_iterator<char, char, std::__1::char_traits<char> > boost::re_d\n```\n","affected":[{"package":{"name":"boost","ecosystem":"OSS-Fuzz","purl":"pkg:generic/boost"},"ranges":[{"type":"GIT","repo":"https://github.com/boostorg/boost.git","events":[{"introduced":"9072bfc2d969ca1e8c49651232817201e05e3eae"},{"introduced":"206cf016ae9454ed65e9c5faf4a322f31444fb80"}]}],"versions":["boost-1.85.0","boost-1.85.0.beta1","boost-1.86.0","boost-1.86.0.beta1","boost-1.87.0.beta1","boost-1.87.0","boost-1.88.0.beta1","boost-1.88.0","boost-1.89.0.beta1","boost-1.89.0","boost-1.90.0.beta1","boost-1.90.0","boost-1.91.0.beta1","boost-1.91.0","boost-1.91.0-1","boost-1.92.0.beta1","boost-1.92.0","boost-1.93.0.beta1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"0251e5fa19564439f3d654df8d4de1abdbaa72b2:9f83dd55ea67f1bab62c20d29bc5527345aafc55","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/boost/OSV-2024-914.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66851"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.0","id":"OSV-2026-1077","published":"2026-07-28T07:23:02.143330Z","modified":"2026-10-20T12:16:28.898889323Z","summary":"Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=536937906\n\n```\nCrash type: Heap-buffer-overflow READ {*}\nCrash state:\nstd::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch\nAssimp::XFileParser::GetNextToken\nAssimp::XFileParser::ParseDataObjectTemplate\n```\n","affected":[{"package":{"name":"assimp","ecosystem":"OSS-Fuzz","purl":"pkg:generic/assimp"},"ranges":[{"type":"GIT","repo":"https://github.com/assimp/assimp.git","events":[{"introduced":"16c50d7b53b5b6536599135004fb003c5e6f88b8"}]}],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"e86df1f8b139f4095653d37dc08622fa5d206663:e2fd15f8f78d99e08fd3d3f90d7add3bf310b122","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2026-1077.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=536937906"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2026-1077","published":"2026-07-28T07:23:02.143330Z","modified":"2026-11-11T14:45:04.509743325Z","summary":"Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=536937906\n\n```\nCrash type: Heap-buffer-overflow READ {*}\nCrash state:\nstd::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch\nAssimp::XFileParser::GetNextToken\nAssimp::XFileParser::ParseDataObjectTemplate\n```\n","affected":[{"package":{"name":"assimp","ecosystem":"OSS-Fuzz","purl":"pkg:generic/assimp"},"ranges":[{"type":"GIT","repo":"https://github.com/assimp/assimp.git","events":[{"introduced":"16c50d7b53b5b6536599135004fb003c5e6f88b8"}]}],"versions":["v6.0.6"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"e86df1f8b139f4095653d37dc08622fa5d206663:e2fd15f8f78d99e08fd3d3f90d7add3bf310b122","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2026-1077.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=536937906"}]}
|
||||
@@ -1 +1 @@
|
||||
{"schema_version":"1.9.2","id":"OSV-2026-1113","published":"2026-08-04T00:18:00.468256Z","modified":"2026-11-03T12:15:03.307036132Z","summary":"Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541854675\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nAssimp::MD5::MD5MeshParser::MD5MeshParser\nAssimp::MD5Importer::LoadMD5MeshFile\nAssimp::MD5Importer::InternReadFile\n```\n","affected":[{"package":{"name":"assimp","ecosystem":"OSS-Fuzz","purl":"pkg:generic/assimp"},"ranges":[{"type":"GIT","repo":"https://github.com/assimp/assimp.git","events":[{"introduced":"16c50d7b53b5b6536599135004fb003c5e6f88b8"}]}],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"e86df1f8b139f4095653d37dc08622fa5d206663:e2fd15f8f78d99e08fd3d3f90d7add3bf310b122","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2026-1113.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541854675"}]}
|
||||
{"schema_version":"1.9.2","id":"OSV-2026-1113","published":"2026-08-04T00:18:00.468256Z","modified":"2026-11-11T14:45:04.509744594Z","summary":"Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541854675\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nAssimp::MD5::MD5MeshParser::MD5MeshParser\nAssimp::MD5Importer::LoadMD5MeshFile\nAssimp::MD5Importer::InternReadFile\n```\n","affected":[{"package":{"name":"assimp","ecosystem":"OSS-Fuzz","purl":"pkg:generic/assimp"},"ranges":[{"type":"GIT","repo":"https://github.com/assimp/assimp.git","events":[{"introduced":"16c50d7b53b5b6536599135004fb003c5e6f88b8"}]}],"versions":["v6.0.6"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"e86df1f8b139f4095653d37dc08622fa5d206663:e2fd15f8f78d99e08fd3d3f90d7add3bf310b122","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2026-1113.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=541854675"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"schema_version":"1.9.2","id":"OSV-2026-1163","published":"2026-08-18T00:09:53.881687Z","modified":"2026-11-11T17:23:28.352446925Z","summary":"Use-of-uninitialized-value in processGSV","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=547003490\n\n```\nCrash type: Use-of-uninitialized-value\nCrash state:\nprocessGSV\nnmea_parse\ngeneric_parse_input\n```\n","affected":[{"package":{"name":"gpsd","ecosystem":"OSS-Fuzz","purl":"pkg:generic/gpsd"},"ranges":[{"type":"GIT","repo":"https://gitlab.com/gpsd/gpsd","events":[{"introduced":"69b540acdcb5a83959d0702f53b38eef26e08e07"},{"fixed":"3aafa6974e537e1af24788d3a2766faf3c874b64"}]}],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpsd/OSV-2026-1163.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=547003490"}]}
|
||||
Reference in New Issue
Block a user