{"id": "OSSFUZZ-19888", "type": "ossfuzz", "bulletinFamily": "software", "title": "libreoffice:cgmfuzzer: Heap-buffer-overflow in CGM::ImplDoClass7", "description": "Project:\ngit://anongit.freedesktop.org/libreoffice/core\n\nDetailed Report: https://oss-fuzz.com/testcase?key=5658636202541056\n\nProject: libreoffice\nFuzzing Engine: libFuzzer\nFuzz Target: cgmfuzzer\nJob Type: libfuzzer_asan_libreoffice\nPlatform Id: linux\n\nCrash Type: Heap-buffer-overflow WRITE 9\nCrash Address: 0x6120001cf580\nCrash State:\n CGM::ImplDoClass7\n CGM::ImplDoClass\n CGM::Write\n \nSanitizer: address (ASAN)\n\nRecommended Security Severity: High\n\nRegressed: https://oss-fuzz.com/revisions?job=libfuzzer_asan_libreoffice&range=201704011633:201704032003\n\nReproducer Testcase: https://oss-fuzz.com/download?testcase_id=5658636202541056\n\nIssue filed automatically.\n\nSee https://google.github.io/oss-fuzz/advanced-topics/reproducing for instructions to reproduce this bug locally.\nWhen you fix this bug, please\n * mention the fix revision(s).\n * state whether the bug was a short-lived regression or an old bug in any stable releases.\n * add any other useful information.\nThis information can help downstream consumers.\n\nIf you need to contact the OSS-Fuzz team with a question, concern, or any other feedback, please file an issue at https://github.com/google/oss-fuzz/issues. Comments on individual Monorail issues are not monitored.\n\nThis bug is subject to a 90 day disclosure deadline. If 90 days elapse\nwithout an upstream patch, then the bug report will automatically\nbecome visible to the public.", "published": "2020-01-07T13:10:21", "modified": "2020-02-06T23:43:12", "cvss": {}, "href": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19888", "reporter": "Google", "references": [], "cvelist": [], "lastseen": "2020-04-03T16:48:02", "viewCount": 0, "enchantments": {"dependencies": {"references": [], "modified": "2020-04-03T16:48:02", "rev": 2}, "score": {"value": -0.6, "vector": "NONE", "modified": "2020-04-03T16:48:02", "rev": 2}, "vulnersScore": -0.6}, "ossfuzz": {"issue": 19888, "status": "Verified", "project": "libreoffice", "ref": "https://oss-fuzz.com/revisions?job=libfuzzer_asan_libreoffice&range=202001060412:202001070432", "crashType": "Heap-buffer-overflow WRITE 9", "revisions": ["0b4f8bf571baf2ccd5a8aafdc4deb41867420be3:035c7717c135c66c0ec025500b73ae9c13b7c586"], "project_repos": ["git://anongit.freedesktop.org/libreoffice/core"], "tags": ["5.4.99", "2.0.0", "3.5.0.0", "2011.11.08", "3.4.2.2-buildfix1", "3.3.99.4-hotfixes1"]}, "affectedSoftware": [{"name": "libreoffice", "version": "2011.11.08", "operator": "eq"}, {"name": "libreoffice", "version": "5.4.99", "operator": "eq"}, {"name": "libreoffice", "version": "3.5.0.0", "operator": "eq"}, {"name": "libreoffice", "version": "3.4.2.2-buildfix1", "operator": "eq"}, {"name": "libreoffice", "version": "3.3.99.4-hotfixes1", "operator": "eq"}, {"name": "libreoffice", "version": "2.0.0", "operator": "eq"}], "immutableFields": []}

{}