OSV-2022-854

Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51022

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor
perfetto::trace_processor::TrackEventModule::ParsePacket
perfetto::trace_processor::ProtoTraceParser::ParseTracePacketImpl

What each source reports

OSV No score

Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51022

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor
perfetto::trace_processor::TrackEventModule::ParsePacket
perfetto::trace_processor::ProtoTraceParser::ParseTracePacketImpl

Record: OSV-2022-854
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`perfetto` OSS-Fuzz	Listed versions, plus commit ranges android-13.0.0_r1android-13.0.0_r2android-13.0.0_r3android-13.0.0_r4android-13.0.0_r5 Show 45 moreShow less android-13.0.0_r6android-cts-13.0_r1android-mainline-12.0.0_r100android-mainline-12.0.0_r122android-mainline-12.0.0_r49android-mainline-12.0.0_r59android-mainline-12.0.0_r63android-mainline-12.0.0_r70android-mainline-12.0.0_r77android-mainline-12.0.0_r99android-security-13.0.0_r1android-vts-13.0_r1platform-tools-29.0.1platform-tools-29.0.2platform-tools-29.0.3platform-tools-29.0.4platform-tools-29.0.5platform-tools-29.0.6platform-tools-30.0.0platform-tools-30.0.1platform-tools-30.0.2platform-tools-30.0.3platform-tools-30.0.4platform-tools-30.0.5platform-tools-31.0.0platform-tools-31.0.1platform-tools-31.0.2platform-tools-31.0.3platform-tools-32.0.0platform-tools-33.0.0platform-tools-33.0.1platform-tools-33.0.2platform-tools-33.0.3v27.0v27.1v28.0v29.0android-13.0.0_r12android-13.0.0_r31android-13.0.0_r7android-13.0.0_r8android-cts-13.0_r2android-cts-13.0_r3android-platform-13.0.0_r1android-platform-13.0.0_r2	None known

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-854 is a vulnerability with no CVSS score yet in perfetto, published September 7, 2022. No source lists public exploit code. A source reports a fix.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=51022

This page doesn't list everything

Left out here: 5 versions. The JSON record has them.