Skip to main content
VulnerabilityPublished

Openjph: UNKNOWN WRITE

Affects openjphSource GCVE Database

0
Severity
High

Rated High by Threat Radar's AI analysis

Patch
Available – fixed in 5783f20bf124c7751d8dc5c34089531803f1e045

Data as of 27 Oct 2026, 02:43 UTC

What to do

Upgrade openjph to 5783f20bf124c7751d8dc5c34089531803f1e045.

Affected software

ProductAffectedFixed in
OSS-Fuzzopenjphpkg:generic/openjphOther threatsAffected
  • 0.27.0 – 0.28.1
  • >=9b576c6700c786cc8752dde6ee7146d82d70e11f <5783f20bf124c7751d8dc5c34089531803f1e045
7 affected builds		Fixed in
  • 5783f20bf124c7751d8dc5c34089531803f1e045

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Apply the available patch identified by commit 5783f20bf124c7751d8dc5c34089531803f1e045 to upgrade openjph beyond versions 0.28.1. This fixes the unknown write vulnerability. No additional mitigation is indicated by the vendor advisory.

Description

A vulnerability in the openjph library versions 0.27.0 through 0.28.1 causes an unknown write error during the parsing of precinct data. This issue was identified via OSS-Fuzz and results in a crash in the function ojph::local::precinct::parse. A fix has been implemented in a later commit.

References

Community reviews

Loading reviews…