OSV-2021-456

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2021-456.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-456
Published
2021-02-28T00:01:15.686942Z
Modified
2026-02-27T14:17:44.197310Z
Summary
Heap-buffer-overflow in grk::Quantizer::read_SQcd_SQcc
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31460

Crash type: Heap-buffer-overflow READ 1
Crash state:
grk::Quantizer::read_SQcd_SQcc
grk::CodeStreamDecompress::read_qcd
grk::CodeStreamDecompress::process_marker
References

Affected packages

OSS-Fuzz / grok

Package

Name
grok
Purl
pkg:generic/grok

Affected ranges

Type
GIT
Repo
https://github.com/GrokImageCompression/grok.git
Events
Introduced
9747b921eda1e267d8c05ca24a7ef69fe2fd1a78

Affected versions

v10.*
v10.0.0
v10.0.0.debian
v10.0.1
v10.0.2
v10.0.3
v10.0.4
v10.0.5
v10.0.5.debian
v10.0.6
v10.0.7
v10.0.8
v8.*
v8.0.1
v8.0.2
v8.0.3
v9.*
v9.0.0
v9.1.0
v9.2.0
v9.3.0
v9.4.0
v9.5.0
v9.5.0.debian
v9.6.0
v9.7.0
v9.7.1
v9.7.2
v9.7.3
v9.7.4
v9.7.5
v9.7.5.debian
v9.7.6
v9.7.7
v9.7.8

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2021-456.yaml"