OSV-2022-886

    Dashboard / Vulnerabilities / OSV-2022-886

    OSV-2022-886

    Published: 12 Sept 2022Last Modified: 12 Sept 2022

    Summary: Heap-buffer-overflow in SfxEntry::add

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51242 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: SfxEntry::add AffixMgr::expand_rootword SuggestMgr::ngsuggest ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51242

    Affected packages

    Package

    Name: hunspell

    Purl: pkg:generic/hunspell

    Affected ranges

    Type: GIT

    Events:

    Introduced- 736841ffd4997b73e939595a140addbfd530329c
    Fixed -6291cac8fb85a96f7e6d5a35f1912365f3b17ae9

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-886 | CVE-DB