{"id":"OSV-2025-638","aliases":[],"status":"published","title":"Security exception in com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438873397\n\n```\nCrash type: Security exception\nCrash state:\ncom.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser\ncom.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.mapOb\ncom.fasterxml.jackson.core.json.UTF8StreamJsonParser.findName\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-08-17T00:01:49.946822Z","modified":"2025-08-17T14:48:59Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"json2avro","ranges":[{"type":"GIT","events":[{"introduced":"2973d1546d9e4590f54a029db483d6d8abde808d"},{"fixed":"ad871e8a497003a90da1ff523b18d96e4afbf5c7"},{"introduced":"d92a3390a6213b1caf4b11e26f923bd6501ffb92"}]}]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438873397","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2025-638","title":"Security exception in com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438873397\n\n```\nCrash type: Security exception\nCrash state:\ncom.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser\ncom.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.mapOb\ncom.fasterxml.jackson.core.json.UTF8StreamJsonParser.findName\n```\n","status":"published","published":"2025-08-17T00:01:49.946822Z","modified":"2025-08-17T14:48:59.288257Z","updated_at":"2026-11-02T15:52:49.981578Z"}]}}