OSV-2020-114

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-114

Published

2020-06-24T01:51:14.708164Z

Modified

2022-04-13T03:04:33.662254Z

Summary

Use-of-uninitialized-value in read_non_idat_chunks

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22646

Crash type: Use-of-uninitialized-value
Crash state:
read_non_idat_chunks
read_chunks
spng_get_plte

References

Affected packages

Type: GIT
Repo: https://github.com/randy408/libspng.git
Events: Introduced

56ea34629ac4e56f2264f7a8212b228873e9f174

Fixed

04b668f9824d0c52cdc0a0b7e58bf767d2a385fc

{
    "severity": "MEDIUM"
}