Every CVE Search/ Get API key

OSV-2022-125

Invalid-free in NIOHTTP2.NIOHTTP2Handler.

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44431

Crash type: Invalid-free
Crash state:
NIOHTTP2.NIOHTTP2Handler.
NIOHTTP2.NIOHTTP2Handler.channelRead
NIOCore.ChannelHandlerContext.

What each source reports

OSV No score

Invalid-free in NIOHTTP2.NIOHTTP2Handler.

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44431

Crash type: Invalid-free
Crash state:
NIOHTTP2.NIOHTTP2Handler.
NIOHTTP2.NIOHTTP2Handler.channelRead
NIOCore.ChannelHandlerContext.
Record
OSV-2022-125
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
grpc-swift
OSS-Fuzz
Listed versions, plus commit ranges
1.1.01.1.11.2.01.3.01.4.0
Show 10 moreShow less
1.4.11.4.1-async-await.11.4.1-async-await.21.4.1-async-await.31.4.21.5.01.6.01.6.0-async-await.11.6.11.7.0
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-125 is a vulnerability with no CVSS score yet in grpc-swift, published February 6, 2022. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open