OSV-2022-460

    Dashboard / Vulnerabilities / OSV-2022-460

    OSV-2022-460

    Published: 6 Jun 2022Last Modified: 9 Jun 2022

    Summary: Heap-use-after-free in inflate

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47834 ``` Crash type: Heap-use-after-free READ 1 Crash state: inflate zlib_body zlib_decompress ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47834

    Affected packages

    Package

    Name: grpc

    Purl: pkg:generic/grpc

    Affected ranges

    Type: GIT

    Events:

    Introduced- 93cdc8b77e7b3fe4a3afec1c9c7e29b3f02ec3cf
    Fixed -df3ce2091354762571bff832558110a40af69e2f

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-460 | CVE-DB