osv-2022-581
Vulnerability from osv_ossfuzz
Published
2022-07-14 00:00
Modified
2026-02-13 14:29
Summary
Heap-buffer-overflow in megasas_map_sgl
Details
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086
Crash type: Heap-buffer-overflow READ 4
Crash state:
megasas_map_sgl
megasas_mmio_write
megasas_port_write
{
"affected": [
{
"ecosystem_specific": {
"severity": "MEDIUM"
},
"package": {
"ecosystem": "OSS-Fuzz",
"name": "qemu",
"purl": "pkg:generic/qemu"
},
"ranges": [
{
"events": [
{
"introduced": "0e042025b9fe262316f29e4b8ec47f0b85c24e5f"
}
],
"repo": "https://git.qemu.org/git/qemu.git",
"type": "GIT"
}
],
"versions": [
"v6.2.0",
"v6.2.0-rc0",
"v6.2.0-rc1",
"v6.2.0-rc3",
"v6.2.0-rc4",
"v7.0.0",
"v7.0.0-rc0",
"v7.0.0-rc1",
"v7.0.0-rc2",
"v7.0.0-rc3",
"v7.0.0-rc4",
"v7.1.0",
"v7.1.0-rc0",
"v7.1.0-rc1",
"v7.1.0-rc2",
"v7.1.0-rc3",
"v7.1.0-rc4",
"v7.2.0-rc0",
"v7.2.0-rc1",
"v7.2.0-rc2",
"v7.2.0-rc3",
"v7.2.0-rc4",
"v7.2.0",
"v8.0.0-rc0",
"v8.0.0-rc1",
"v8.0.0-rc2",
"v7.2.1",
"v8.0.0-rc3",
"v8.0.0-rc4",
"v8.0.0",
"v7.2.2",
"v7.2.3",
"v8.0.1",
"v8.0.2",
"v7.2.4",
"v8.0.3",
"v8.1.0-rc0",
"v8.1.0-rc1",
"v8.1.0-rc2",
"v7.2.5",
"v8.0.4",
"v8.1.0-rc3",
"v8.1.0-rc4",
"v8.1.0",
"v7.2.6",
"v8.0.5",
"v8.1.1",
"v8.1.2",
"v8.2.0-rc0",
"v7.2.7",
"v8.1.3",
"v8.2.0-rc1",
"v8.2.0-rc2",
"v8.2.0-rc3",
"v8.2.0-rc4",
"v8.2.0",
"v7.2.8",
"v8.1.4",
"v7.2.9",
"v8.1.5",
"v8.2.1",
"v7.2.10",
"v8.2.2",
"v9.0.0-rc0",
"v9.0.0-rc1",
"v9.0.0-rc2",
"v9.0.0-rc3",
"v9.0.0-rc4",
"v7.2.11",
"v8.2.3",
"v9.0.0",
"v8.2.4",
"v7.2.12",
"v8.2.5",
"v9.0.1",
"v7.2.13",
"v8.2.6",
"v9.0.2",
"v9.1.0-rc0",
"v9.1.0-rc1",
"v9.1.0-rc2",
"v9.1.0-rc3",
"v9.1.0-rc4",
"v9.1.0",
"v7.2.14",
"v8.2.7",
"v9.0.3",
"v9.1.1",
"v9.2.0-rc0",
"v7.2.15",
"v8.2.8",
"v9.0.4",
"v9.1.2",
"v9.2.0-rc1",
"v9.2.0-rc2",
"v9.2.0-rc3",
"v9.2.0",
"v7.2.16",
"v8.2.9",
"v9.1.3",
"v9.2.1",
"v9.2.2",
"v10.0.0-rc0",
"v10.0.0-rc1",
"v7.2.17",
"v8.2.10",
"v9.2.3",
"v10.0.0-rc2",
"v10.0.0-rc3",
"v10.0.0-rc4",
"v10.0.0",
"v10.0.1",
"v7.2.18",
"v9.2.4",
"v10.0.2",
"v10.0.3",
"v10.1.0-rc0",
"v7.2.19",
"v10.0.4",
"v10.1.0",
"v10.1.0-rc1",
"v10.1.0-rc2",
"v10.1.0-rc3",
"v10.1.0-rc4",
"v7.2.20",
"v10.0.5",
"v10.1.1",
"v7.2.21",
"v10.0.6",
"v10.1.2",
"v10.2.0-rc1",
"v10.2.0-rc2",
"v10.0.7",
"v10.1.3",
"v7.2.22",
"v10.2.0-rc3",
"v10.2.0-rc4",
"v10.2.0",
"v10.0.8",
"v10.1.4",
"v10.2.1"
]
}
],
"details": "OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nmegasas_map_sgl\nmegasas_mmio_write\nmegasas_port_write\n```\n",
"id": "OSV-2022-581",
"modified": "2026-02-13T14:29:03.475Z",
"published": "2022-07-14T00:00:45.644503Z",
"references": [
{
"type": "REPORT",
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086"
}
],
"schema_version": "1.3.0",
"summary": "Heap-buffer-overflow in megasas_map_sgl"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…