{"schema_version":"1.7.3","id":"OSV-2020-325","published":"2020-07-01T00:00:02.845124Z","modified":"2022-04-13T03:04:42.135767Z","summary":"Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15159\n\n```\nCrash type: Stack-buffer-overflow READ {*}\nCrash state:\nstd::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch\nnccfdriver::attrf\nnccfdriver::getCFVersion\n```\n","affected":[{"package":{"name":"gdal","ecosystem":"OSS-Fuzz","purl":"pkg:generic/gdal"},"ranges":[{"type":"GIT","repo":"https://github.com/OSGeo/gdal","events":[{"introduced":"38c1e385e81223476828d57aa83af5716a9256b7"},{"fixed":"767e3a56144f676ca738ef8f700e0e56035bd05a"},{"introduced":"27b9bf644bcf1208f7d6594bdd104cc8a8bb0646"}]}],"versions":["v2.4.2","v2.4.3","v2.4.3RC1","v2.4.4","v2.4.4RC1","v3.0.1","v3.0.2","v3.0.2RC1","v3.0.3","v3.0.3RC1","v3.0.4","v3.0.4RC1"],"ecosystem_specific":{"introduced_range":"289b796e365ac26020548410d6ae16022bc80718:f956a3c6ff43a877a63ee1199c5e0092c11a8c31","severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gdal/OSV-2020-325.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15159"}]}