{"id":"OSV-2020-173","summary":"Use-of-uninitialized-value in BaseCryptStream::BaseCryptStream","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20200\n\n```\nCrash type: Use-of-uninitialized-value\nCrash state:\nBaseCryptStream::BaseCryptStream\nDecryptStream::DecryptStream\nParser::getObj\n```\n","modified":"2022-04-13T03:04:37.242270Z","published":"2020-06-24T01:51:17.351460Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20200"}],"affected":[{"package":{"name":"poppler","ecosystem":"OSS-Fuzz","purl":"pkg:generic/poppler"},"ranges":[{"type":"GIT","repo":"https://anongit.freedesktop.org/git/poppler/poppler.git","events":[{"introduced":"bf03344ad26b1227b5052420feabe062441c02ed"},{"fixed":"e249d8965c0f39bd4dcb882048535a5272f66566"}]}],"versions":["poppler-0.66.0","poppler-0.67.0","poppler-0.68.0","poppler-0.69.0","poppler-0.70.0","poppler-0.70.1","poppler-0.71.0","poppler-0.72.0","poppler-0.73.0","poppler-0.74.0","poppler-0.75.0","poppler-0.76.0","poppler-0.76.1","poppler-0.77.0","poppler-0.78.0","poppler-0.79.0","poppler-0.80.0","poppler-0.81.0","poppler-0.82.0","poppler-0.83.0","poppler-0.84.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/poppler/OSV-2020-173.yaml"}}],"schema_version":"1.7.3"}