OSV-2020-1521

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/stb/OSV-2020-1521.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-1521
Published
2020-07-28T00:00:36Z
Modified
2022-04-13T03:04:40Z
Summary
Use-of-uninitialized-value in stbi__jpeg_huff_decode
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22598

Crash type: Use-of-uninitialized-value
Crash state:
stbi__jpeg_huff_decode
stbi__jpeg_decode_block_prog_ac
stbi__parse_entropy_coded_data
References

Affected packages

OSS-Fuzz / stb

Package

Name
stb
Purl
pkg:generic/stb

Affected ranges

Type
GIT
Repo
https://github.com/nothings/stb.git
Events
Introduced
f54acd4e13430c5122cab4ca657705c84aa61b08
Fixed
b42009b3b9d4ca35bc703f5310eedc74f584be58
Fixed
af1a5bc352164740c1cc1354942b1c6b72eacb8a

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"b42009b3b9d4ca35bc703f5310eedc74f584be58:af1a5bc352164740c1cc1354942b1c6b72eacb8a"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/stb/OSV-2020-1521.yaml"