{"id":"OSV-2022-867","aliases":[],"status":"published","title":"Heap-buffer-overflow in get_utf_8_string","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51090\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nget_utf_8_string\ndissect_form_urlencoded\ncall_dissector_work\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2022-09-09T00:01:54.157712Z","modified":"2026-11-12T15:30:29Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"wireshark","ranges":[{"type":"GIT","events":[{"introduced":"248ff020e7ea17785cc9451f6d24ad61c4310d1f"}]}],"versions":["v4.1.0","v4.1.1rc0","v4.2.0rc0","v4.3.0rc0","v4.2.0rc1","v4.2.0rc2","wireshark-4.2.0rc2","v4.2.0rc3","v4.2.0","v4.2.1rc0","wireshark-4.2.0","v4.2.1","v4.2.2rc0","wireshark-4.2.1","v4.2.2","v4.2.3rc0","wireshark-4.2.2","v4.2.3","v4.2.4rc0","wireshark-4.2.3","v4.2.4","v4.2.5rc0","wireshark-4.2.4","v4.2.5","v4.2.6rc0","wireshark-4.2.5","v4.3.0rc1","v4.2.6","v4.2.7rc0","wireshark-4.2.6","v4.3.0","v4.3.1rc0","v4.3.1","v4.3.2rc0","v4.4.0rc0","v4.5.0rc0","v4.4.0rc1","v4.2.7","v4.2.8rc0","v4.4.0","v4.4.1rc0","wireshark-4.2.7","wireshark-4.4.0","v4.2.8","v4.2.9rc0","v4.4.1","v4.4.2rc0","wireshark-4.2.8","wireshark-4.4.1","v4.2.10rc0","v4.2.9","v4.4.2","v4.4.3rc0","wireshark-4.2.9","wireshark-4.4.2","ssv0.9.0rc0","v4.2.10","v4.2.11rc0","v4.4.3","v4.4.4rc0","wireshark-4.2.10","wireshark-4.4.3","ssv0.9.0rc1","ssv0.9.0","v4.2.11","v4.2.12rc0","v4.4.4","v4.4.5rc0","wireshark-4.2.11","wireshark-4.4.4","ssv0.9.1","v4.4.5","v4.4.6rc0","wireshark-4.4.5","ssv0.9.2rc0","v4.4.6","v4.6.7rc0","wireshark-4.4.6","v4.4.7rc0","v4.2.12","v4.2.13rc0","v4.4.7","v4.4.8rc0","wireshark-4.2.12","wireshark-4.4.7","ssv0.9.2","ssv0.9.3rc0","v4.4.8","v4.4.9rc0","wireshark-4.4.8","ssv0.9.3","v4.2.13","v4.2.14rc0","v4.4.10rc0","v4.4.9","v4.6.0rc0","v4.6.0rc1","v4.7.0rc0","wireshark-4.2.13","wireshark-4.4.9","ssv0.9.4rc0","v4.2.14","v4.4.10","v4.6.0","v4.2.15rc0","v4.4.11rc0","v4.6.1rc0","v4.4.11","v4.4.12rc0","v4.6.1","v4.6.2rc0","v4.6.2","v4.6.3rc0","v4.4.12","v4.4.13rc0","v4.4.13","v4.4.14rc0","v4.6.3","v4.6.4rc0","v4.4.14","v4.4.15rc0","v4.6.4","v4.6.5rc0","v4.4.15","v4.4.16rc0","v4.6.5","v4.6.6rc0","v4.4.16","v4.4.17rc0","v4.6.6","ssv0.10.0","v4.7.0","ssv0.10.1rc0","v4.7.1rc0","ssv0.10.1","ssv0.10.2rc0","v4.7.1","v4.7.2rc0","v4.4.17","v4.4.18rc0","v4.6.7","v4.6.8rc0","ssv0.10.2","ssv0.10.3rc0","v4.7.2","v4.7.3rc0","v4.4.18","v4.4.19rc0","v4.6.8","v4.6.9rc0","ssv0.10.3","ssv0.10.4rc0","v4.7.3","v4.7.4rc0","ssv0.10.4","ssv0.10.5rc0","v4.4.19","v4.4.20rc0","v4.6.10rc0","v4.6.9","v4.7.4","v4.7.5rc0","ssv1.0.0rc0","ssv1.1.0rc0","v5.0.0rc0","v5.1.0rc0","ssv1.0.0rc1","v5.0.0rc1","ssv1.0.0rc2","v5.0.0rc2"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51090","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2022-867","title":"Heap-buffer-overflow in get_utf_8_string","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51090\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nget_utf_8_string\ndissect_form_urlencoded\ncall_dissector_work\n```\n","status":"published","published":"2022-09-09T00:01:54.157712Z","modified":"2026-11-12T15:30:29.772849237Z","updated_at":"2026-11-12T15:54:08.394971Z"}]}}