{"id":"OSV-2022-525","summary":"Heap-buffer-overflow in spvtools::CFA\u003cspvtools::val::BasicBlock\u003e::CalculateDominators","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48553\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nspvtools::CFA\u003cspvtools::val::BasicBlock\u003e::CalculateDominators\nspvtools::val::PerformCfgChecks\nspvtools::val::ValidateBinaryUsingContextAndValidationState\n```\n","modified":"2023-02-24T01:57:25.025789Z","published":"2022-07-01T00:01:50.518518Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48553"}],"affected":[{"package":{"name":"spirv-tools","ecosystem":"OSS-Fuzz","purl":"pkg:generic/spirv-tools"},"ranges":[{"type":"GIT","repo":"https://github.com/KhronosGroup/SPIRV-Tools.git","events":[{"introduced":"286e9c1187053b4363fe963636f242263e1e5cd9"},{"fixed":"7326b967a52aecef25b3fedaaba388d6616db93d"}]}],"versions":["sdk-1.3.224.0","sdk-1.3.224.1","sdk-1.3.231.0","v2022.3","v2022.4","sdk-1.3.231.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/spirv-tools/OSV-2022-525.yaml"}}],"schema_version":"1.7.3"}