OSV-2022-1106

    Dashboard / Vulnerabilities / OSV-2022-1106

    OSV-2022-1106

    Published: 28 Oct 2022Last Modified: 20 Oct 2026

    Summary: Heap-buffer-overflow in APFSJObject::add_entry

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52764 ``` Crash type: Heap-buffer-overflow READ {*} Crash state: APFSJObject::add_entry APFSJObject::APFSJObject APFSJObject::APFSJObject ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52764

    Affected packages

    Package

    Name: sleuthkit

    Purl: pkg:generic/sleuthkit

    Affected ranges

    Type: GIT

    Events:

    Introduced- 58c8b602d5134ab69be2826410005c2894e45a73
    Fixed -37493d4561bd67aa0f4a6d182bc4c327b26cf2f9

    Affected versions

    ct-3.10.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-1106 | CVE-DB