OSV-2023-837

    Dashboard / Vulnerabilities / OSV-2023-837

    OSV-2023-837

    Published: 12 Sept 2023Last Modified: 12 Sept 2023

    Summary: Heap-buffer-overflow in uint7_get_64

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62270 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: uint7_get_64 cram_huffman_decode_init cram_decoder_init ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62270

    Affected packages

    Package

    Name: htslib

    Purl: pkg:generic/htslib

    Affected ranges

    Type: GIT

    Events:

    Introduced- 9c7e845e25cdb899cd833e96a46ef7d6dd8fb6be
    Fixed -28a980bba6f731f901906f57e5c1ee19f4155849

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-837 | CVE-DB