{"id":"OSV-2017-79","summary":"Heap-buffer-overflow in fuzz_read_callback","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4785\n\n```\nCrash type: Heap-buffer-overflow WRITE {*}\nCrash state:\nfuzz_read_callback\nCurl_fillreadbuffer\nreadwrite_upload\n```\n","modified":"2022-04-13T03:04:42.850130Z","published":"2021-01-13T21:57:35.291125Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4785"}],"affected":[{"package":{"name":"curl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/curl"},"ranges":[{"type":"GIT","repo":"https://github.com/curl/curl.git","events":[{"introduced":"7ee59512f875604eb468fb6f3d26e39290f781c9"},{"fixed":"ab6eb2ec0744074004980d0f98677e52b215941f"}]}],"versions":["curl-7_57_0","curl-7_58_0","curl-7_59_0","curl-7_60_0","curl-7_61_0","curl-7_61_1","curl-7_62_0","curl-7_63_0","curl-7_64_0","curl-7_64_1","curl-7_65_0","curl-7_65_1","curl-7_65_2","curl-7_65_3","curl-7_66_0","curl-7_67_0","curl-7_68_0","curl-7_69_0","curl-7_69_1","curl-7_70_0","curl-7_71_0","curl-7_71_1","curl-7_72_0","curl-7_73_0","curl-7_74_0","tiny-curl-7_72_0"],"ecosystem_specific":{"fixed_range":"b399b04902c43f479b51b142505700edcfc34271:ab6eb2ec0744074004980d0f98677e52b215941f","introduced_range":"1cb4f5d6e8e470638759a48ba99fda230089712f:e240a546a7ac2fa7956adb664b8c40c4dee4f82b","severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/curl/OSV-2017-79.yaml"}}],"schema_version":"1.7.3"}