OSV-2022-248

    Dashboard / Vulnerabilities / OSV-2022-248

    OSV-2022-248

    Published: 16 Mar 2022Last Modified: 13 Apr 2022

    Summary: Uncaught exception in java.base/java.nio.Bits.reserveMemory

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45563 ``` Crash type: Uncaught exception Crash state: java.base/java.nio.Bits.reserveMemory java.base/java.nio.DirectByteBuffer.<init> java.base/java.nio.ByteBuffer.allocateDirect ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45563

    Affected packages

    Package

    Name: arrow-java

    Purl: pkg:generic/arrow-java

    Affected ranges

    Type: GIT

    Events:

    Introduced- ed03ea2401deeeca4a3274a8a0ca7124d07cde33
    Fixed -3eaa7dd0e8b3dabc5438203331f05e3e6c011e37

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-248 | CVE-DB