OSV-2021-1417

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2021-1417.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-1417

Published

2021-10-07T00:00:22.505600Z

Modified

2022-04-13T03:04:39.598070Z

Summary

Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39632

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
openhtj2k::T1OpenHTJ2K::decompress
std::__1::__packaged_task_func&lt;std::__1::__bind&lt;grk::T1DecompressScheduler::deco
std::__1::packaged_task&lt;int

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39632

Affected packages

OSS-Fuzz / grok

Package

Name: grok
Purl: pkg:generic/grok

Affected ranges

Type: GIT
Repo: https://github.com/GrokImageCompression/grok.git
Events: Introduced

9c466c61a86ffc12f4890b0ff80717d4a9909015

Fixed

b9e67bcc7b62d2d4490357a6d49d240e892b061c

Ecosystem specific

{
    "severity": "HIGH"
}