OSV-2023-72

Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor
perfetto::trace_processor::TrackEventModule::ParseTracePacketData
perfetto::trace_processor::ProtoTraceParser::ParseTracePacket

What each source reports

OSV No score

Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor
perfetto::trace_processor::TrackEventModule::ParseTracePacketData
perfetto::trace_processor::ProtoTraceParser::ParseTracePacket

Record: OSV-2023-72
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`perfetto` OSS-Fuzz	Listed versions, plus commit ranges android-13.0.0_r1android-13.0.0_r12android-13.0.0_r2android-13.0.0_r3android-13.0.0_r31 Show 45 moreShow less android-13.0.0_r4android-13.0.0_r5android-13.0.0_r6android-13.0.0_r7android-13.0.0_r8android-cts-13.0_r1android-cts-13.0_r2android-cts-13.0_r3android-mainline-12.0.0_r100android-mainline-12.0.0_r122android-mainline-12.0.0_r49android-mainline-12.0.0_r59android-mainline-12.0.0_r63android-mainline-12.0.0_r70android-mainline-12.0.0_r77android-mainline-12.0.0_r99android-platform-13.0.0_r1android-platform-13.0.0_r2android-security-13.0.0_r1android-security-13.0.0_r2android-vts-13.0_r1android-vts-13.0_r2android-vts-13.0_r3platform-tools-29.0.1platform-tools-29.0.2platform-tools-29.0.3platform-tools-29.0.4platform-tools-29.0.5platform-tools-29.0.6platform-tools-30.0.0platform-tools-30.0.1platform-tools-30.0.2platform-tools-30.0.3platform-tools-30.0.4platform-tools-30.0.5platform-tools-31.0.0platform-tools-31.0.1platform-tools-31.0.2platform-tools-31.0.3platform-tools-32.0.0platform-tools-33.0.0platform-tools-33.0.1platform-tools-33.0.2platform-tools-33.0.3platform-tools-33.0.4	None known

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2023-72 is a vulnerability with no CVSS score yet in perfetto, published February 18, 2023. No source lists public exploit code. A source reports a fix.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057

This page doesn't list everything

Left out here: 12 versions. The JSON record has them.