{"id":"OSV-2024-636","summary":"Null-dereference READ in evp_mac_final","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69236\n\n```\nCrash type: Null-dereference READ\nCrash state:\nevp_mac_final\nkbkdf_derive\ndo_evp_kdf\n```\n","modified":"2024-07-13T00:04:18.446812Z","published":"2024-07-13T00:04:18.446520Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69236"}],"affected":[{"package":{"name":"openssl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/openssl"},"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl.git","events":[{"introduced":"f3b988dc29512d6575ff435e1ff7c1b66d97051e"},{"fixed":"861e1f450c808bdf675bbf0d3e17303a3f16d06c"}]}],"ecosystem_specific":{"severity":null},"database_specific":{"fixed_range":"06da14737369e7c90899aed4bb21cce9a0910d29:861e1f450c808bdf675bbf0d3e17303a3f16d06c","introduced_range":"b9e084f139c53ce133e66aba2f523c680141c0e6:05faa4ffee7f20fcee129f77d153f2dcc609bdc8","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openssl/OSV-2024-636.yaml"}}],"schema_version":"1.7.3"}