OSV-2021-282

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-282

Published

2021-02-06T00:00:24.519678Z

Modified

2022-04-13T03:04:39.979494Z

Summary

Heap-buffer-overflow in LibRaw_buffer_datastream::read

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30324

Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
LibRaw_buffer_datastream::read
LibRaw::uncompressed_fp_dng_load_raw
LibRaw::unpack

References

Affected packages

Type: GIT
Repo: https://github.com/libraw/libraw
Events: Introduced

4c954948ba2de262b9cb23a1843fb8651aa3dcc1

Fixed

363e91ea656f4ce46584b4b0af6285030f236b7e

{
    "severity": "HIGH"
}