{"schema_version":"1.9.0","id":"OSV-2025-447","published":"2025-06-09T00:05:11.128452Z","modified":"2026-10-20T17:25:41.214911785Z","summary":"Use-of-uninitialized-value in spvtools::EmitNumericLiteral","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=423059200\n\n```\nCrash type: Use-of-uninitialized-value\nCrash state:\nspvtools::EmitNumericLiteral\nspvtools::disassemble::InstructionDisassembler::EmitOperand\nspvtools::disassemble::InstructionDisassembler::EmitInstructionImpl\n```\n","affected":[{"package":{"name":"spirv-tools","ecosystem":"OSS-Fuzz","purl":"pkg:generic/spirv-tools"},"ranges":[{"type":"GIT","repo":"https://github.com/KhronosGroup/SPIRV-Tools.git","events":[{"introduced":"6061b72049a037215dfaba87399e1910a97b350e"}]}],"versions":["v2025.3.rc1","vulkan-sdk-1.4.321.0","v2025.4.rc1","vulkan-sdk-1.4.363.0","v2026.4.rc2","v2026.4","v2026.4.rc1","vulkan-sdk-1.4.357.0","v2026.3.rc1","v2026.3","vulkan-sdk-1.4.350.1","vulkan-sdk-1.4.350.0","v2026.2.rc2","v2026.2","v2026.2.rc1","vulkan-sdk-1.4.341.0","v2026.1.rc1","v2026.1","vulkan-sdk-1.4.335.0","v2025.5.rc1","v2025.5","vulkan-sdk-1.4.328.1","vulkan-sdk-1.4.328.0","v2025.4","v2025.3"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"7dda3c01fb4c0f9941d3cb792947d57d896ac55f:ec1c9ca71ae2e0a63f4245978accde381865266b","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/https:/github.com/KhronosGroup/SPIRV-Tools.git/OSV-2025-447.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=423059200"}]}