OSV-2018-47

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gdal/OSV-2018-47.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2018-47

Published

2021-01-13T00:00:26.157766Z

Modified

2022-04-13T03:04:42.129484Z

Summary

Heap-buffer-overflow in ycc_rgb_convert

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9471

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ycc_rgb_convert
sep_upsample
process_data_context_main

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9471

Affected packages

OSS-Fuzz / gdal

Package

Name: gdal
Purl: pkg:generic/gdal

Affected ranges

Type: GIT
Repo: https://github.com/OSGeo/gdal
Events: Introduced

5eb75bc8495a304b6f9a13ecabcbfa88997c64e1

Fixed

60eef5839291a1c2ab71cdc064bd654358fcdb49

Ecosystem specific

{
    "severity": "HIGH",
    "introduced_range": "6f7ed05cbdd7e3bf3fac7b55a2526abe48ceb49b:07b7be15cebf2d7fce93bcfc362a7675ee7ff660",
    "fixed_range": "ca4d5f62359f196c7331e75a25ba318b4509e6b5:60eef5839291a1c2ab71cdc064bd654358fcdb49"
}