{"id":"OSV-2022-854","summary":"Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51022\n\n```\nCrash type: Heap-buffer-overflow WRITE 4\nCrash state:\nperfetto::trace_processor::TrackEventParser::ParseTrackDescriptor\nperfetto::trace_processor::TrackEventModule::ParsePacket\nperfetto::trace_processor::ProtoTraceParser::ParseTracePacketImpl\n```\n","modified":"2023-04-20T22:55:15.851034Z","published":"2022-09-07T00:00:54.323344Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51022"}],"affected":[{"package":{"name":"perfetto","ecosystem":"OSS-Fuzz","purl":"pkg:generic/perfetto"},"ranges":[{"type":"GIT","repo":"https://android.googlesource.com/platform/external/perfetto/","events":[{"introduced":"8209fb9b9a4156232aa87ad4621e541bfb777ec1"},{"fixed":"bb1b58e6d1d86b3122bb9574f2530093ff1cc2eb"}]}],"versions":["android-13.0.0_r1","android-13.0.0_r2","android-13.0.0_r3","android-13.0.0_r4","android-13.0.0_r5","android-13.0.0_r6","android-cts-13.0_r1","android-mainline-12.0.0_r100","android-mainline-12.0.0_r122","android-mainline-12.0.0_r49","android-mainline-12.0.0_r59","android-mainline-12.0.0_r63","android-mainline-12.0.0_r70","android-mainline-12.0.0_r77","android-mainline-12.0.0_r99","android-security-13.0.0_r1","android-vts-13.0_r1","platform-tools-29.0.1","platform-tools-29.0.2","platform-tools-29.0.3","platform-tools-29.0.4","platform-tools-29.0.5","platform-tools-29.0.6","platform-tools-30.0.0","platform-tools-30.0.1","platform-tools-30.0.2","platform-tools-30.0.3","platform-tools-30.0.4","platform-tools-30.0.5","platform-tools-31.0.0","platform-tools-31.0.1","platform-tools-31.0.2","platform-tools-31.0.3","platform-tools-32.0.0","platform-tools-33.0.0","platform-tools-33.0.1","platform-tools-33.0.2","platform-tools-33.0.3","v27.0","v27.1","v28.0","v29.0","android-13.0.0_r12","android-13.0.0_r31","android-13.0.0_r7","android-13.0.0_r8","android-cts-13.0_r2","android-cts-13.0_r3","android-platform-13.0.0_r1","android-platform-13.0.0_r2","android-security-13.0.0_r2","android-vts-13.0_r2","android-vts-13.0_r3","android-security-13.0.0_r3","android-security-13.0.0_r4"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"fixed_range":"ee1648233f427cc5526481e1074a48bd77caa29e:bb1b58e6d1d86b3122bb9574f2530093ff1cc2eb","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/perfetto/OSV-2022-854.yaml"}}],"schema_version":"1.7.3"}