OSV-2021-1797

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2021-1797.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-1797
Published
2022-01-02T00:01:48.961299Z
Modified
2022-04-13T03:04:39.534267Z
Summary
Heap-buffer-overflow in grk::GrkImage::cieLabToRGB
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43161

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
grk::GrkImage::cieLabToRGB
grk::GrkImage::applyColourManagement
grk::CodeStreamDecompress::postProcess
References

Affected packages

OSS-Fuzz / grok

Package

Name
grok
Purl
pkg:generic/grok

Affected ranges

Type
GIT
Repo
https://github.com/GrokImageCompression/grok.git
Events
Introduced
28f1ea700dfc35a1364898fdc5c1e2fe500e8bc7
Fixed
5ee01b547418efb8b90702d8b8ec5d05d1f28015

Ecosystem specific 

{
    "severity": "HIGH"
}