OSV-2021-1748

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2021-1748.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-1748

Published

2021-12-24T00:01:41Z

Modified

2022-04-13T03:04:41Z

Summary

Heap-buffer-overflow in jxl::N_AVX2::FloatToRGBA8

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42839

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
jxl::N_AVX2::FloatToRGBA8
jxl::FinalizeImageRect
jxl::ThreadPool::RunCallState<jxl::FinalizeFrameDecoding

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42839

Affected packages

OSS-Fuzz / libjxl

Package

Name: libjxl
Purl: pkg:generic/libjxl

Affected ranges

Type: GIT
Repo: https://github.com/libjxl/libjxl.git
Events: Introduced

7c5dfcd35fc6a91ae9d776bda7e23ecfaa8bfb38

Fixed

533444ddc1a71987f263a40fb6286c3303a54a51

Fixed

33e0c341ba0bde6265752db0009e9be8052897f7

Ecosystem specific

{
    "severity": "HIGH"
}

Database specific

fixed_range

"ba1932b04bf8db3263372ce5524e35a995d36fa0:33e0c341ba0bde6265752db0009e9be8052897f7"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2021-1748.yaml"