OSV-2023-885

UNKNOWN READ in bytes1_char_at

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62508

Crash type: UNKNOWN READ
Crash state:
bytes1_char_at
ascii_at_line_end
try_match

What each source reports

OSV No score

UNKNOWN READ in bytes1_char_at

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62508

Crash type: UNKNOWN READ
Crash state:
bytes1_char_at
ascii_at_line_end
try_match

Record: OSV-2023-885
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`mrab-regex` PyPI	Listed versions, plus commit ranges 2021.11.102022.1.182022.10.312022.3.152022.3.2 Show 18 moreShow less 2022.4.242022.6.22022.7.242022.7.252022.7.92022.8.172022.9.112022.9.132023.03.222023.10.32023.3.222023.3.232023.5.22023.5.32023.5.42023.5.52023.6.32023.8.8	None known

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2023-885 is a vulnerability with no CVSS score yet in mrab-regex, published September 20, 2023. No source lists public exploit code. A source reports a fix.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=62508