osv-2022-331
Vulnerability from osv_ossfuzz
Published
2022-04-11 00:00
Modified
2023-04-20 22:56
Summary
Stack-buffer-overflow in void unwindstack::Symbols::BuildRemapTable<Elf64_Sym>
Details
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46546
Crash type: Stack-buffer-overflow READ {*} Crash state: void unwindstack::Symbols::BuildRemapTable bool unwindstack::Symbols::GetName unwindstack::ElfInterfaceImpl::GetFunctionName
{
"affected": [
{
"ecosystem_specific": {
"severity": "MEDIUM"
},
"package": {
"ecosystem": "OSS-Fuzz",
"name": "perfetto",
"purl": "pkg:generic/perfetto"
},
"ranges": [
{
"events": [
{
"introduced": "da9e4d482dd38db6cdf5d1316adbad1c97a9f7a1"
},
{
"fixed": "ca566bde5f2e1159a8debf4f8cdec4973a2f0e61"
}
],
"repo": "https://android.googlesource.com/platform/external/perfetto/",
"type": "GIT"
}
],
"versions": [
"aml_adb_331011040",
"aml_adb_331011050",
"aml_ads_331131000",
"aml_art_331012050",
"aml_ase_331011020",
"aml_cbr_330810000",
"aml_cbr_330911010",
"aml_cbr_331013010",
"aml_con_331011010",
"aml_doc_310851020",
"aml_ext_331012020",
"aml_go_adb_330913000",
"aml_go_ads_330913000",
"aml_go_art_330913000",
"aml_go_ase_330913000",
"aml_go_cbr_330912000",
"aml_go_con_330913000",
"aml_go_doc_330912000",
"aml_go_ext_330912000",
"aml_go_ips_330911000",
"aml_go_med_330913000",
"aml_go_mpr_330912000",
"aml_go_net_330913000",
"aml_go_neu_330912000",
"aml_go_odp_330912000",
"aml_go_per_330912000",
"aml_go_res_330912000",
"aml_go_sch_330911000",
"aml_go_sdk_330810000",
"aml_go_sta_330911000",
"aml_go_swc_330913000",
"aml_go_tet_330914010",
"aml_go_tz4_330912000",
"aml_go_uwb_330912000",
"aml_go_wif_330911000",
"aml_ips_331014020",
"aml_med_331012020",
"aml_mpr_311911090",
"aml_mpr_330811020",
"aml_mpr_330911040",
"aml_mpr_331011070",
"aml_net_330811010",
"aml_net_330910010",
"aml_net_331011030",
"aml_per_330811030",
"aml_per_330912010",
"aml_per_331019040",
"aml_res_330810000",
"aml_res_330910000",
"aml_res_331011050",
"aml_sdk_311710000",
"aml_sdk_330810010",
"aml_sdk_330810050",
"aml_sta_330910000",
"aml_sta_331010010",
"aml_swc_331012020",
"aml_tet_311811050",
"aml_tet_330812150",
"aml_tet_330911010",
"aml_tet_331012080",
"aml_tz2_303200001",
"aml_tz2_303800001",
"aml_tz2_303800002",
"aml_tz3_311312010",
"aml_tz3_312410010",
"aml_tz3_312410020",
"aml_tz4_331012000",
"aml_tz4_331012040",
"aml_tz4_331012050",
"aml_uwb_330810010",
"aml_uwb_331015040",
"aml_wif_311811030",
"aml_wif_330810040",
"aml_wif_330910030",
"aml_wif_331016070",
"android-11.0.0_r30",
"android-11.0.0_r32",
"android-11.0.0_r33",
"android-11.0.0_r34",
"android-11.0.0_r35",
"android-11.0.0_r36",
"android-11.0.0_r37",
"android-11.0.0_r38",
"android-11.0.0_r39",
"android-11.0.0_r40",
"android-11.0.0_r43",
"android-11.0.0_r46",
"android-12.0.0_r1",
"android-12.0.0_r10",
"android-12.0.0_r11",
"android-12.0.0_r12",
"android-12.0.0_r13",
"android-12.0.0_r14",
"android-12.0.0_r15",
"android-12.0.0_r16",
"android-12.0.0_r18",
"android-12.0.0_r19",
"android-12.0.0_r2",
"android-12.0.0_r20",
"android-12.0.0_r21",
"android-12.0.0_r25",
"android-12.0.0_r26",
"android-12.0.0_r27",
"android-12.0.0_r28",
"android-12.0.0_r29",
"android-12.0.0_r3",
"android-12.0.0_r30",
"android-12.0.0_r31",
"android-12.0.0_r32",
"android-12.0.0_r33",
"android-12.0.0_r34",
"android-12.0.0_r4",
"android-12.0.0_r5",
"android-12.0.0_r6",
"android-12.0.0_r7",
"android-12.0.0_r8",
"android-12.0.0_r9",
"android-12.1.0_r1",
"android-12.1.0_r10",
"android-12.1.0_r11",
"android-12.1.0_r12",
"android-12.1.0_r13",
"android-12.1.0_r14",
"android-12.1.0_r15",
"android-12.1.0_r16",
"android-12.1.0_r17",
"android-12.1.0_r18",
"android-12.1.0_r19",
"android-12.1.0_r2",
"android-12.1.0_r20",
"android-12.1.0_r21",
"android-12.1.0_r22",
"android-12.1.0_r23",
"android-12.1.0_r24",
"android-12.1.0_r25",
"android-12.1.0_r26",
"android-12.1.0_r27",
"android-12.1.0_r3",
"android-12.1.0_r4",
"android-12.1.0_r5",
"android-12.1.0_r6",
"android-12.1.0_r7",
"android-12.1.0_r8",
"android-12.1.0_r9",
"android-13.0.0_r1",
"android-13.0.0_r10",
"android-13.0.0_r11",
"android-13.0.0_r12",
"android-13.0.0_r13",
"android-13.0.0_r14",
"android-13.0.0_r15",
"android-13.0.0_r16",
"android-13.0.0_r17",
"android-13.0.0_r18",
"android-13.0.0_r2",
"android-13.0.0_r3",
"android-13.0.0_r4",
"android-13.0.0_r5",
"android-13.0.0_r6",
"android-13.0.0_r7",
"android-13.0.0_r8",
"android-13.0.0_r9",
"android-cts-11.0_r2",
"android-cts-12.0_r1",
"android-cts-12.0_r2",
"android-cts-12.0_r3",
"android-cts-12.0_r4",
"android-cts-12.0_r5",
"android-cts-12.0_r6",
"android-cts-12.1_r1",
"android-cts-12.1_r2",
"android-cts-12.1_r3",
"android-cts-12.1_r4",
"android-cts-13.0_r1",
"android-cts-13.0_r2",
"android-mainline-11.0.0_r12",
"android-mainline-11.0.0_r13",
"android-mainline-11.0.0_r14",
"android-mainline-11.0.0_r15",
"android-mainline-11.0.0_r16",
"android-mainline-11.0.0_r17",
"android-mainline-11.0.0_r18",
"android-mainline-11.0.0_r20",
"android-mainline-11.0.0_r21",
"android-mainline-11.0.0_r22",
"android-mainline-11.0.0_r23",
"android-mainline-11.0.0_r24",
"android-mainline-11.0.0_r25",
"android-mainline-11.0.0_r26",
"android-mainline-11.0.0_r27",
"android-mainline-11.0.0_r28",
"android-mainline-11.0.0_r30",
"android-mainline-11.0.0_r31",
"android-mainline-11.0.0_r32",
"android-mainline-11.0.0_r34",
"android-mainline-11.0.0_r35",
"android-mainline-11.0.0_r36",
"android-mainline-11.0.0_r37",
"android-mainline-11.0.0_r38",
"android-mainline-11.0.0_r39",
"android-mainline-11.0.0_r40",
"android-mainline-11.0.0_r41",
"android-mainline-11.0.0_r42",
"android-mainline-11.0.0_r43",
"android-mainline-11.0.0_r44",
"android-mainline-12.0.0_r1",
"android-mainline-12.0.0_r10",
"android-mainline-12.0.0_r100",
"android-mainline-12.0.0_r101",
"android-mainline-12.0.0_r102",
"android-mainline-12.0.0_r103",
"android-mainline-12.0.0_r104",
"android-mainline-12.0.0_r105",
"android-mainline-12.0.0_r106",
"android-mainline-12.0.0_r107",
"android-mainline-12.0.0_r108",
"android-mainline-12.0.0_r109",
"android-mainline-12.0.0_r11",
"android-mainline-12.0.0_r110",
"android-mainline-12.0.0_r112",
"android-mainline-12.0.0_r113",
"android-mainline-12.0.0_r114",
"android-mainline-12.0.0_r115",
"android-mainline-12.0.0_r116",
"android-mainline-12.0.0_r117",
"android-mainline-12.0.0_r118",
"android-mainline-12.0.0_r119",
"android-mainline-12.0.0_r12",
"android-mainline-12.0.0_r120",
"android-mainline-12.0.0_r121",
"android-mainline-12.0.0_r122",
"android-mainline-12.0.0_r123",
"android-mainline-12.0.0_r124",
"android-mainline-12.0.0_r125",
"android-mainline-12.0.0_r126",
"android-mainline-12.0.0_r13",
"android-mainline-12.0.0_r15",
"android-mainline-12.0.0_r16",
"android-mainline-12.0.0_r17",
"android-mainline-12.0.0_r18",
"android-mainline-12.0.0_r19",
"android-mainline-12.0.0_r2",
"android-mainline-12.0.0_r20",
"android-mainline-12.0.0_r21",
"android-mainline-12.0.0_r22",
"android-mainline-12.0.0_r23",
"android-mainline-12.0.0_r24",
"android-mainline-12.0.0_r25",
"android-mainline-12.0.0_r26",
"android-mainline-12.0.0_r27",
"android-mainline-12.0.0_r28",
"android-mainline-12.0.0_r29",
"android-mainline-12.0.0_r3",
"android-mainline-12.0.0_r30",
"android-mainline-12.0.0_r31",
"android-mainline-12.0.0_r33",
"android-mainline-12.0.0_r34",
"android-mainline-12.0.0_r35",
"android-mainline-12.0.0_r36",
"android-mainline-12.0.0_r37",
"android-mainline-12.0.0_r38",
"android-mainline-12.0.0_r39",
"android-mainline-12.0.0_r4",
"android-mainline-12.0.0_r40",
"android-mainline-12.0.0_r41",
"android-mainline-12.0.0_r42",
"android-mainline-12.0.0_r43",
"android-mainline-12.0.0_r44",
"android-mainline-12.0.0_r45",
"android-mainline-12.0.0_r46",
"android-mainline-12.0.0_r47",
"android-mainline-12.0.0_r48",
"android-mainline-12.0.0_r49",
"android-mainline-12.0.0_r5",
"android-mainline-12.0.0_r50",
"android-mainline-12.0.0_r51",
"android-mainline-12.0.0_r52",
"android-mainline-12.0.0_r53",
"android-mainline-12.0.0_r56",
"android-mainline-12.0.0_r57",
"android-mainline-12.0.0_r58",
"android-mainline-12.0.0_r59",
"android-mainline-12.0.0_r6",
"android-mainline-12.0.0_r60",
"android-mainline-12.0.0_r61",
"android-mainline-12.0.0_r62",
"android-mainline-12.0.0_r63",
"android-mainline-12.0.0_r64",
"android-mainline-12.0.0_r65",
"android-mainline-12.0.0_r66",
"android-mainline-12.0.0_r67",
"android-mainline-12.0.0_r68",
"android-mainline-12.0.0_r69",
"android-mainline-12.0.0_r7",
"android-mainline-12.0.0_r70",
"android-mainline-12.0.0_r71",
"android-mainline-12.0.0_r72",
"android-mainline-12.0.0_r73",
"android-mainline-12.0.0_r74",
"android-mainline-12.0.0_r75",
"android-mainline-12.0.0_r76",
"android-mainline-12.0.0_r77",
"android-mainline-12.0.0_r78",
"android-mainline-12.0.0_r79",
"android-mainline-12.0.0_r8",
"android-mainline-12.0.0_r80",
"android-mainline-12.0.0_r81",
"android-mainline-12.0.0_r82",
"android-mainline-12.0.0_r83",
"android-mainline-12.0.0_r84",
"android-mainline-12.0.0_r85",
"android-mainline-12.0.0_r86",
"android-mainline-12.0.0_r87",
"android-mainline-12.0.0_r88",
"android-mainline-12.0.0_r89",
"android-mainline-12.0.0_r9",
"android-mainline-12.0.0_r90",
"android-mainline-12.0.0_r91",
"android-mainline-12.0.0_r92",
"android-mainline-12.0.0_r93",
"android-mainline-12.0.0_r94",
"android-mainline-12.0.0_r95",
"android-mainline-12.0.0_r96",
"android-mainline-12.0.0_r97",
"android-mainline-12.0.0_r98",
"android-mainline-12.0.0_r99",
"android-platform-12.0.0_r1",
"android-platform-12.0.0_r10",
"android-platform-12.0.0_r11",
"android-platform-12.0.0_r12",
"android-platform-12.0.0_r13",
"android-platform-12.0.0_r14",
"android-platform-12.0.0_r2",
"android-platform-12.0.0_r3",
"android-platform-12.0.0_r4",
"android-platform-12.0.0_r5",
"android-platform-12.0.0_r6",
"android-platform-12.0.0_r7",
"android-platform-12.0.0_r8",
"android-platform-12.0.0_r9",
"android-platform-12.1.0_r1",
"android-platform-12.1.0_r10",
"android-platform-12.1.0_r2",
"android-platform-12.1.0_r3",
"android-platform-12.1.0_r4",
"android-platform-12.1.0_r5",
"android-platform-12.1.0_r6",
"android-platform-12.1.0_r7",
"android-platform-12.1.0_r8",
"android-platform-12.1.0_r9",
"android-platform-13.0.0_r1",
"android-platform-13.0.0_r2",
"android-platform-13.0.0_r3",
"android-s-beta-1",
"android-s-beta-2",
"android-s-beta-3",
"android-s-beta-4",
"android-s-beta-5",
"android-s-preview-1",
"android-s-qpr3-beta-1",
"android-s-v2-beta-2",
"android-s-v2-beta-3",
"android-s-v2-preview-1",
"android-s-v2-preview-2",
"android-security-12.0.0_r34",
"android-security-12.0.0_r35",
"android-security-12.0.0_r36",
"android-security-12.0.0_r37",
"android-security-12.0.0_r38",
"android-security-12.0.0_r39",
"android-security-12.0.0_r40",
"android-security-12.0.0_r41",
"android-security-12.0.0_r42",
"android-security-13.0.0_r1",
"android-t-beta-3",
"android-t-preview-1",
"android-t-preview-2",
"android-vts-11.0_r2",
"android-vts-12.0_r1",
"android-vts-12.0_r2",
"android-vts-12.0_r3",
"android-vts-12.0_r4",
"android-vts-12.0_r5",
"android-vts-12.0_r6",
"android-vts-12.1_r1",
"android-vts-12.1_r2",
"android-vts-12.1_r3",
"android-vts-12.1_r4",
"android-vts-13.0_r1",
"android-vts-13.0_r2",
"platform-tools-29.0.1",
"platform-tools-29.0.2",
"platform-tools-29.0.3",
"platform-tools-29.0.4",
"platform-tools-29.0.5",
"platform-tools-29.0.6",
"platform-tools-30.0.0",
"platform-tools-30.0.1",
"platform-tools-30.0.2",
"platform-tools-30.0.3",
"platform-tools-30.0.4",
"platform-tools-30.0.5",
"platform-tools-31.0.0",
"platform-tools-31.0.1",
"platform-tools-31.0.2",
"platform-tools-31.0.3",
"platform-tools-32.0.0",
"platform-tools-33.0.0",
"platform-tools-33.0.1",
"platform-tools-33.0.2",
"platform-tools-33.0.3",
"studio-2021.2.1",
"studio-2021.2.1-patch1",
"studio-2021.2.1-patch2",
"studio-2021.3.1",
"studio-2021.3.1-beta",
"studio-2022.1.1-beta2",
"studio-2022.1.1-beta4",
"studio-2022.1.1-canary",
"studio-2022.2.1-canary2",
"studio-2022.2.1-canary7",
"t_frc_adb_330444000",
"t_frc_art_330443060",
"t_frc_cbr_330443000",
"t_frc_con_330443020",
"t_frc_doc_330443000",
"t_frc_doc_330443060",
"t_frc_ext_330443000",
"t_frc_ips_330443010",
"t_frc_med_330443030",
"t_frc_net_330443000",
"t_frc_neu_330443000",
"t_frc_neu_330443030",
"t_frc_per_330444010",
"t_frc_res_330443000",
"t_frc_sch_330443010",
"t_frc_sch_330443040",
"t_frc_sta_330443010",
"t_frc_swc_330443010",
"t_frc_swc_330443040",
"v10.0",
"v11.0",
"v12.0",
"v12.1",
"v13.0",
"v14.0",
"v15.0",
"v16.0",
"v16.1",
"v17.0",
"v18.0",
"v19.0",
"v20.0",
"v20.1",
"v21.0",
"v22.0",
"v22.1",
"v23.0",
"v24.0",
"v24.1",
"v24.2",
"v25.0",
"v26.0",
"v26.1",
"v27.0",
"v27.1",
"v28.0",
"v29.0",
"v30.0",
"v31.0",
"v7.0",
"v8.0",
"v9.0",
"aml_adb_331113120",
"aml_adb_331314020",
"aml_art_331113000",
"aml_art_331314010",
"aml_ase_331112000",
"aml_cbr_331111030",
"aml_cbr_331310010",
"aml_con_331115000",
"aml_con_331312000",
"aml_ext_331112010",
"aml_ext_331312000",
"aml_ips_331111030",
"aml_ips_331310000",
"aml_med_331115000",
"aml_med_331318000",
"aml_mpr_331112030",
"aml_mpr_331112050",
"aml_mpr_331311080",
"aml_net_331110020",
"aml_net_331313010",
"aml_net_331313030",
"aml_per_331115020",
"aml_per_331313010",
"aml_res_331114000",
"aml_res_331314010",
"aml_sta_331311000",
"aml_swc_331116000",
"aml_swc_331318000",
"aml_tet_331117000",
"aml_tet_331312080",
"aml_tz2_303900102",
"aml_tz3_312511010",
"aml_tz4_331314010",
"aml_uwb_331115000",
"aml_uwb_331310030",
"aml_wif_331112000",
"aml_wif_331310070",
"android-13.0.0_r19",
"android-13.0.0_r20",
"android-13.0.0_r21",
"android-13.0.0_r22",
"android-13.0.0_r23",
"android-13.0.0_r24",
"android-13.0.0_r27",
"android-13.0.0_r28",
"android-13.0.0_r29",
"android-13.0.0_r30",
"android-13.0.0_r31",
"android-cts-12.0_r7",
"android-cts-12.1_r5",
"android-cts-13.0_r3",
"android-platform-12.0.0_r15",
"android-platform-12.0.0_r16",
"android-platform-12.1.0_r11",
"android-platform-12.1.0_r12",
"android-platform-13.0.0_r4",
"android-platform-13.0.0_r5",
"android-security-12.0.0_r43",
"android-security-12.0.0_r44",
"android-security-13.0.0_r2",
"android-vts-12.0_r7",
"android-vts-12.1_r5",
"android-vts-13.0_r3",
"studio-2022.1.1",
"studio-2022.1.1-rc3",
"studio-2022.2.1-beta1",
"studio-2022.2.1-canary10",
"studio-2022.3.1-canary1",
"t_frc_doc_330543000",
"aml_ads_331418080",
"aml_ads_331511020",
"aml_art_331413030",
"aml_cbr_331411000",
"aml_cbr_331510000",
"aml_con_331411000",
"aml_ext_331412000",
"aml_med_331410000",
"aml_med_331511000",
"aml_mpr_331412040",
"aml_mpr_331512020",
"aml_net_331412000",
"aml_per_331411000",
"aml_per_331512020",
"aml_res_331512000",
"aml_sta_331410000",
"aml_sta_331511000",
"aml_swc_331410000",
"aml_swc_331511000",
"aml_tet_331412030",
"aml_tet_331511000",
"aml_tz2_303900110",
"aml_tz3_312511020",
"aml_tz4_331314020",
"aml_tz4_331314030",
"aml_uwb_331410010",
"aml_wif_331414000",
"aml_wif_331511020",
"android-13.0.0_r32",
"android-13.0.0_r33",
"android-13.0.0_r34",
"android-13.0.0_r35",
"android-13.0.0_r36",
"android-13.0.0_r37",
"android-13.0.0_r38",
"android-13.0.0_r39",
"android-13.0.0_r40",
"android-13.0.0_r41",
"android-platform-12.0.0_r17",
"android-platform-12.0.0_r18",
"android-platform-12.1.0_r13",
"android-platform-12.1.0_r14",
"android-platform-13.0.0_r6",
"android-security-12.0.0_r45",
"android-security-12.0.0_r46",
"android-security-13.0.0_r3",
"android-security-13.0.0_r4",
"studio-2022.2.1",
"studio-2022.2.1-beta5",
"studio-2022.3.1-canary8"
]
}
],
"details": "OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46546\n\nCrash type: Stack-buffer-overflow READ {*}\nCrash state:\nvoid unwindstack::Symbols::BuildRemapTable\u003cElf64_Sym\u003e\nbool unwindstack::Symbols::GetName\u003cElf64_Sym\u003e\nunwindstack::ElfInterfaceImpl\u003cunwindstack::ElfTypes64\u003e::GetFunctionName\n",
"id": "OSV-2022-331",
"modified": "2023-04-20T22:56:13.048149Z",
"published": "2022-04-11T00:00:39.202876Z",
"references": [
{
"type": "REPORT",
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46546"
}
],
"schema_version": "1.2.0",
"summary": "Stack-buffer-overflow in void unwindstack::Symbols::BuildRemapTable\u003cElf64_Sym\u003e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…