OSV-2021-1651

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gdal/OSV-2021-1651.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-1651
Published
2021-12-06T00:00:07.396834Z
Modified
2023-02-24T02:04:52.362539Z
Summary
Heap-buffer-overflow in PCIDSK::CPCIDSKFile::ReadFromFile
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41993

Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
PCIDSK::CPCIDSKFile::ReadFromFile
PCIDSK::CPCIDSKSegment::ReadFromFile
PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment
References

Affected packages

OSS-Fuzz / gdal

Package

Name
gdal
Purl
pkg:generic/gdal

Affected ranges

Type
GIT
Repo
https://github.com/OSGeo/gdal
Events
Introduced
3c7e9db1ab4d28306a8700e38d2f4c0e2fa46b82
Fixed
1ca6a3e5168c200763fa46d8aa7e698d0b757e7e
Fixed
73f006c054b47b00acf42bc6bf96e348fd53ab4b

Affected versions

v3.*

v3.3.0
v3.3.0RC1
v3.3.0beta1
v3.3.1
v3.3.1RC1
v3.3.2
v3.3.2RC1
v3.3.2RC2
v3.3.2RC3
v3.3.3
v3.3.3RC1
v3.4.0
v3.4.0RC1
v3.4.0RC2
v3.4.0RC3
v3.4.1
v3.4.1RC1
v3.4.2
v3.4.2RC1
v3.4.2RC2
v3.4.3
v3.4.3RC1
v3.4.3RC2

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "introduced_range": "53960d2a40b39b4482efc514f9ca289652447675:762a261f32617b506a9fc199040a5dbdc5214716",
    "fixed_range": "a6d42bd6adbdcec27a6a64c844598912d325de14:73f006c054b47b00acf42bc6bf96e348fd53ab4b"
}