OSV-2020-1610

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2020-1610.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-1610
Published
2020-08-14T00:01:49.720909Z
Modified
2022-04-13T03:37:36.826015Z
Summary
Segv on unknown address in Imf_2_5::hufUncompress
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24854

Crash type: Segv on unknown address
Crash state:
Imf_2_5::hufUncompress
Imf_2_5::DwaCompressor::uncompress
Imf_2_5::DwaCompressor::uncompress
References

Affected packages

OSS-Fuzz / openexr

Package

Name
openexr
Purl
pkg:generic/openexr

Affected ranges

Type
GIT
Repo
https://github.com/AcademySoftwareFoundation/openexr
Events

Affected versions

v2.*

v2.5.3
v2.5.4
v2.5.5
v2.5.6
v2.5.7
v2.5.7-rc1
v2.5.8