OSV-2018-47

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gdal/OSV-2018-47.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2018-47
Published
2021-01-13T00:00:26.157766Z
Modified
2022-04-13T03:04:42.129484Z
Summary
Heap-buffer-overflow in ycc_rgb_convert
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9471

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
ycc_rgb_convert
sep_upsample
process_data_context_main
References

Affected packages

OSS-Fuzz / gdal

Package

Name
gdal
Purl
pkg:generic/gdal

Affected ranges

Type
GIT
Repo
https://github.com/OSGeo/gdal
Events
Introduced
5eb75bc8495a304b6f9a13ecabcbfa88997c64e1
Fixed
60eef5839291a1c2ab71cdc064bd654358fcdb49

Ecosystem specific 

{
    "fixed_range": "ca4d5f62359f196c7331e75a25ba318b4509e6b5:60eef5839291a1c2ab71cdc064bd654358fcdb49",
    "severity": "HIGH",
    "introduced_range": "6f7ed05cbdd7e3bf3fac7b55a2526abe48ceb49b:07b7be15cebf2d7fce93bcfc362a7675ee7ff660"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gdal/OSV-2018-47.yaml"