OSV-2024-73

    Dashboard / Vulnerabilities / OSV-2024-73

    OSV-2024-73

    Published: 4 Feb 2024Last Modified: 29 Apr 2024

    Summary: Heap-buffer-overflow in pdf_finalize_string

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66093 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: pdf_finalize_string cli_pdf cli_scanpdf ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66093

    Affected packages

    Package

    Name: clamav

    Purl: pkg:generic/clamav

    Affected ranges

    Type: GIT

    Events:

    Introduced- d114e3fc66fe5ed025ae5d2d3d6ffbcf0a42d7ec
    Fixed -82491dabaa9e2d6004519371b67dd36aa4dec3c9

    Affected versions

    clamav-1.3.0-rc2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2024-73 | CVE-DB