OSV-2020-376
Heap-buffer-overflow in perfetto::trace_processor::fuchsia_trace_utils::ReadTimestamp
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14767
Crash type: Heap-buffer-overflow READ 8
Crash state:
perfetto::trace_processor::fuchsia_trace_utils::ReadTimestamp
perfetto::trace_processor::FuchsiaTraceParser::ParseTracePacket
perfetto::trace_processor::TraceSorter::SortAndExtractEventsBeyondWindow
What each source reports
OSV No score
Heap-buffer-overflow in perfetto::trace_processor::fuchsia_trace_utils::ReadTimestamp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14767
Crash type: Heap-buffer-overflow READ 8
Crash state:
perfetto::trace_processor::fuchsia_trace_utils::ReadTimestamp
perfetto::trace_processor::FuchsiaTraceParser::ParseTracePacket
perfetto::trace_processor::TraceSorter::SortAndExtractEventsBeyondWindow
- Record
OSV-2020-376- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
perfettoOSS-Fuzz |
Listed versions, plus commit ranges android-10.0.0_r1android-10.0.0_r10android-10.0.0_r11android-10.0.0_r12android-10.0.0_r13 Show 45 moreShow lessandroid-10.0.0_r14android-10.0.0_r15android-10.0.0_r16android-10.0.0_r17android-10.0.0_r18android-10.0.0_r19android-10.0.0_r2android-10.0.0_r20android-10.0.0_r21android-10.0.0_r22android-10.0.0_r23android-10.0.0_r24android-10.0.0_r25android-10.0.0_r26android-10.0.0_r27android-10.0.0_r28android-10.0.0_r29android-10.0.0_r3android-10.0.0_r30android-10.0.0_r31android-10.0.0_r32android-10.0.0_r33android-10.0.0_r34android-10.0.0_r35android-10.0.0_r36android-10.0.0_r37android-10.0.0_r38android-10.0.0_r39android-10.0.0_r4android-10.0.0_r40android-10.0.0_r41android-10.0.0_r42android-10.0.0_r43android-10.0.0_r44android-10.0.0_r45android-10.0.0_r46android-10.0.0_r47android-10.0.0_r5android-10.0.0_r6android-10.0.0_r7android-10.0.0_r8android-10.0.0_r9android-cts-10.0_r1android-cts-10.0_r2android-cts-10.0_r3 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2020-376 is a vulnerability with no CVSS score yet in perfetto, published July 1, 2020. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 67 versions. The JSON record has them.