OSV-2022-880

    Dashboard / Vulnerabilities / OSV-2022-880

    OSV-2022-880

    Published: 11 Sept 2022Last Modified: 11 Sept 2022

    Summary: Global-buffer-overflow in _getBaseCellNeighbor

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51208 ``` Crash type: Global-buffer-overflow READ 4 Crash state: _getBaseCellNeighbor localIjkToCell localIjToCell ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51208

    Affected packages

    Package

    Name: h3

    Purl: pkg:generic/h3

    Affected ranges

    Type: GIT

    Events:

    Introduced- ba89a19aa6d765ceb6f52d0e956b576293a67911
    Fixed -fce1c53844ca21dcc14f3acabeaf2e12d47e5568

    Affected versions

    v4.0.0
    v4.0.0-rc2
    v4.0.0-rc3
    v4.0.0-rc4
    v4.0.0-rc5

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-880 | CVE-DB