{"id":"OSV-2023-1286","summary":"Security exception in java.base/sun.security.util.DerInputStream.getUnalignedBitString","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64975\n\n```\nCrash type: Security exception\nCrash state:\njava.base/sun.security.util.DerInputStream.getUnalignedBitString\njava.base/sun.security.x509.X509Key.parse\njava.base/sun.security.x509.CertificateX509Key.\u003cinit\u003e\n```\n","modified":"2023-12-12T00:10:50.300536Z","published":"2023-12-12T00:10:50.300092Z","withdrawn":"2024-09-17T08:49:41.545472Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64975"}],"affected":[{"package":{"name":"sigstore-java","ecosystem":"OSS-Fuzz","purl":"pkg:generic/sigstore-java"},"ecosystem_specific":{"severity":"LOW"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/sigstore-java/OSV-2023-1286.yaml"}}],"schema_version":"1.7.3"}