Every CVE Search/ Get API key

OSV-2024-39

Heap-buffer-overflow in simdutf::westmere::implementation::convert_utf8_to_utf32

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66063

Crash type: Heap-buffer-overflow WRITE 16
Crash state:
simdutf::westmere::implementation::convert_utf8_to_utf32
roundtrip.cc

What each source reports

OSV No score

Heap-buffer-overflow in simdutf::westmere::implementation::convert_utf8_to_utf32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66063

Crash type: Heap-buffer-overflow WRITE 16
Crash state:
simdutf::westmere::implementation::convert_utf8_to_utf32
roundtrip.cc
Record
OSV-2024-39
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
simdutf
OSS-Fuzz
Listed versions, plus commit ranges
v4.0.4v4.0.5v4.0.6v4.0.7v4.0.8
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2024-39 is a vulnerability with no CVSS score yet in simdutf, published January 25, 2024. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open