OSV-2020-1874

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2020-1874.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-1874
Published
2020-09-29T00:00:24.645658Z
Modified
2022-04-13T03:04:34.803318Z
Summary
Use-of-uninitialized-value in load_truetype_glyph
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22182

Crash type: Use-of-uninitialized-value
Crash state:
load_truetype_glyph
TT_Load_Glyph
tt_glyph_load
References

Affected packages

OSS-Fuzz / ghostscript

Package

Name
ghostscript
Purl
pkg:generic/ghostscript

Affected ranges

Type
GIT
Repo
git://git.ghostscript.com/ghostpdl.git
Events
Introduced
668917a10e7eada030f7d2dddec9f579fddeed3d
Fixed
889df15d7c69e1fc90c6491f574352cacf9bc065

Affected versions

ghostpdl-9.*

ghostpdl-9.52-test-base-3
ghostpdl-9.52-test-base-4
ghostpdl-9.52-test-base-5
ghostpdl-9.52-test-base-6

Ecosystem specific 

{
    "severity": "MEDIUM",
    "introduced_range": "unknown:668917a10e7eada030f7d2dddec9f579fddeed3d"
}