{"id":"OSV-2020-833","summary":"Heap-buffer-overflow in Hacl_Chacha20PolyNUMBER_256_aead_decrypt","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23934\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nHacl_Chacha20PolyNUMBER_256_aead_decrypt\nChaCha20PolyNUMBER_Open\nsftk_ChaCha20PolyNUMBER_Decrypt\n```\n","modified":"2022-04-13T03:04:35.071517Z","published":"2020-07-14T22:13:39.041123Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23934"}],"affected":[{"package":{"name":"cryptofuzz","ecosystem":"OSS-Fuzz","purl":"pkg:generic/cryptofuzz"},"ranges":[{"type":"GIT","repo":"https://github.com/guidovranken/cryptofuzz","events":[{"introduced":"2619bffde72e48bfe5a572776783bf92615b7c05"},{"fixed":"7b97d7fbad5d847074ffb0a8cbe14778d78e28ca"}]}],"ecosystem_specific":{"severity":"MEDIUM","fixed_range":"919fa5710aec81c21dc26492e499ae541042e68c:7b97d7fbad5d847074ffb0a8cbe14778d78e28ca","introduced_range":"9a08637f4aa56f0da3c8b1f4f363c7ec7a933a75:bb51393c0d141478d0255f1bd1ee06eb845edeb2"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/cryptofuzz/OSV-2020-833.yaml"}}],"schema_version":"1.7.3"}