OSV-2024-39

    Dashboard / Vulnerabilities / OSV-2024-39

    OSV-2024-39

    Published: 25 Jan 2024Last Modified: 29 Apr 2024

    Summary: Heap-buffer-overflow in simdutf::westmere::implementation::convert_utf8_to_utf32

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66063 ``` Crash type: Heap-buffer-overflow WRITE 16 Crash state: simdutf::westmere::implementation::convert_utf8_to_utf32 roundtrip.cc ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66063

    Affected packages

    Package

    Name: simdutf

    Purl: pkg:generic/simdutf

    Affected ranges

    Type: GIT

    Events:

    Introduced- 59b81c798c0c88ca4c573ebde77c3b38eb0352cb
    Fixed -c708a9e4c1dc880241c252bec76fada53ab84da3

    Affected versions

    v4.0.4
    v4.0.5
    v4.0.6
    v4.0.7
    v4.0.8

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2024-39 | CVE-DB