OSV-2021-1797

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2021-1797.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-1797

Published

2022-01-02T00:01:48Z

Modified

2022-04-13T03:04:39Z

Summary

Heap-buffer-overflow in grk::GrkImage::cieLabToRGB

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43161

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
grk::GrkImage::cieLabToRGB
grk::GrkImage::applyColourManagement
grk::CodeStreamDecompress::postProcess

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43161

Affected packages

OSS-Fuzz / grok

Package

Name: grok
Purl: pkg:generic/grok

Affected ranges

Type: GIT
Repo: https://github.com/GrokImageCompression/grok.git
Events: Introduced

28f1ea700dfc35a1364898fdc5c1e2fe500e8bc7

Fixed

5ee01b547418efb8b90702d8b8ec5d05d1f28015

Ecosystem specific

{
    "severity": "HIGH"
}

Database specific

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2021-1797.yaml"