OSV-2021-849

    Dashboard / Vulnerabilities / OSV-2021-849

    OSV-2021-849

    Published: 11 Jun 2021Last Modified: 13 Apr 2022

    Summary: Negative-size-param in mrb_str_format

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35109 ``` Crash type: Negative-size-param Crash state: mrb_str_format mrb_f_sprintf mrb_vm_exec ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35109

    Affected packages

    Package

    Name: mruby

    Purl: pkg:generic/mruby

    Affected ranges

    Type: GIT

    Events:

    Introduced- 972cc8b5a8c0378c391f981153ccdccf24c89d21
    Fixed -62f4cc8cd1d5839153eb364c1c095df64d7cdc22

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-849 | CVE-DB