OSV-2022-534

    Dashboard / Vulnerabilities / OSV-2022-534

    OSV-2022-534

    Published: 6 Jul 2022Last Modified: 6 Jul 2022

    Summary: Heap-buffer-overflow in json_parse

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48736 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: json_parse file_is_json file_buffer ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48736

    Affected packages

    Package

    Name: file

    Purl: pkg:generic/file

    Affected ranges

    Type: GIT

    Events:

    Introduced- 522e7901a20dc6f2d1ceafb5d12d44f94946e11a
    Fixed -16756ff9286df9a43b4b6e21824975a1c6809835

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-534 | CVE-DB