OSV-2020-1253

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/leptonica/OSV-2020-1253.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-1253
Published
2020-07-22T21:50:00Z
Modified
2022-04-13T03:04:32Z
Summary
Heap-buffer-overflow in pixReadFromTiffStream
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21435

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
pixReadFromTiffStream
pixReadMemTiff
pixReadMem
References

Affected packages

OSS-Fuzz / leptonica

Package

Name
leptonica
Purl
pkg:generic/leptonica

Affected ranges

Type
GIT
Repo
https://github.com/DanBloomberg/leptonica.git
Events
Introduced
e88377bfc6b2c07977485180ada4ad19826e06cb
Fixed
06b279a676ce5928f86e61329c27d22b957c1374
Fixed
ad50d81027f7e7716f2b9ab28b7aa476eae2d741

Ecosystem specific 

{
    "introduced_range": "unknown:e88377bfc6b2c07977485180ada4ad19826e06cb",
    "severity": "HIGH"
}

Database specific

fixed_range 
"7274a4a0cd69d20f4e8eec524ef3482852cb340d:ad50d81027f7e7716f2b9ab28b7aa476eae2d741"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/leptonica/OSV-2020-1253.yaml"