OSV-2020-254

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/leptonica/OSV-2020-254.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-254
Published
2020-06-26T00:00:11.669926Z
Modified
2022-04-13T03:04:32.633763Z
Summary
Heap-buffer-overflow in pixReadFromTiffStream
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23654

Crash type: Heap-buffer-overflow READ 1
Crash state:
pixReadFromTiffStream
pixReadMemTiff
pixReadMem
References

Affected packages

OSS-Fuzz / leptonica

Package

Name
leptonica
Purl
pkg:generic/leptonica

Affected ranges

Type
GIT
Repo
https://github.com/DanBloomberg/leptonica.git
Events
Introduced
26425b91ea850552d11af0ead0557eb0a328785f
Fixed
5ba34b1fe741d69d43a6c8cf767756997eadd87c
Fixed
8466a469b8c3a8d521f0fced041f8c5367eac21e

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"ab66d051d8fd57584c350d687a8cc2424565c33c:8466a469b8c3a8d521f0fced041f8c5367eac21e"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/leptonica/OSV-2020-254.yaml"