OSV-2022-852

    Dashboard / Vulnerabilities / OSV-2022-852

    OSV-2022-852

    Published: 7 Sept 2022Last Modified: 19 Oct 2023

    Summary: Security exception in java.base/java.nio.Bits.reserveMemory

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51044 ``` Crash type: Security exception Crash state: java.base/java.nio.Bits.reserveMemory java.base/java.nio.DirectByteBuffer.<init> java.base/java.nio.ByteBuffer.allocateDirect ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51044

    Affected packages

    Package

    Name: arrow-java

    Purl: pkg:generic/arrow-java

    Affected ranges

    Type: GIT

    Events:

    Introduced- 7a0ba80702ef63e63e346d2a9ca3137d8baca8bb
    Fixed -58546e2002df0d49832061925d099736a510505e

    Affected versions

    apache-arrow-10.0.0
    apache-arrow-10.0.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-852 | CVE-DB