openRuyi Lookout
← Packages

draco

cmakeAdvisory 5

A library for compressing and decompressing 3D geometric meshes and point clouds

Current
1.5.7
Candidate
1.5.9
License
Apache-2.0

Build

TargetResultLast successful versionSucceeded at
rva23
1.5.7
rva20
1.5.7
x86_64
1.5.7

Advisory · 5

Query ecosystem
GITOSV
Query name
https://github.com/google/dracoOSV
Query version
1.5.7OSV

Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.

  • OSV-2020-778
    OSV
    Summary
    Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocatOSV
    Fixed events
    —OSV
    Aliases
    —OSV
    EPSS (no CVE alias)
    not applicableFIRST
    KEV (no CVE alias)
    not applicableCISA
  • OSV-2020-800
    OSV
    Summary
    UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::cOSV
    Fixed events
    —OSV
    Aliases
    —OSV
    EPSS (no CVE alias)
    not applicableFIRST
    KEV (no CVE alias)
    not applicableCISA
  • OSV-2020-824
    OSV
    Summary
    UNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_traitOSV
    Fixed events
    —OSV
    Aliases
    —OSV
    EPSS (no CVE alias)
    not applicableFIRST
    KEV (no CVE alias)
    not applicableCISA
  • OSV-2020-828
    OSV
    Summary
    Heap-use-after-free in draco::Metadata::AddSubMetadataOSV
    Fixed events
    —OSV
    Aliases
    —OSV
    EPSS (no CVE alias)
    not applicableFIRST
    KEV (no CVE alias)
    not applicableCISA
  • OSV-2021-1082
    OSV
    Summary
    UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::cOSV
    Fixed events
    —OSV
    Aliases
    —OSV
    EPSS (no CVE alias)
    not applicableFIRST
    KEV (no CVE alias)
    not applicableCISA

Changelog

PR · 1

Checks
MonitorObservationLast checked
Source
Checked
Version
Checked
Build
Checked
GitHub
Checked
EOL
Not configured
No reliable monitor identity/configuration.
—
LicenseDiff
Not configured
No reliable monitor identity/configuration.
—
Dependencies
Not configured
No reliable monitor identity/configuration.
—
Advisory
Checked
Repository query; subpackage and local-patch applicability are not evaluated.
Yanked
Not configured
No reliable monitor identity/configuration.
—