OSV-2022-1128

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/librawspeed/OSV-2022-1128.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-1128
Published
2022-11-02T00:02:45.378194Z
Modified
2022-11-02T00:02:45.378451Z
Summary
Heap-buffer-overflow in void rawspeed::DngOpcodes::PixelOpcode::applyOP<unsigned short, rawspeed::DngOpc
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52944

Crash type: Heap-buffer-overflow READ 4
Crash state:
void rawspeed::DngOpcodes::PixelOpcode::applyOP&lt;unsigned short, rawspeed::DngOpc
rawspeed::DngOpcodes::applyOpCodes
rawspeed::DngDecoder::handleMetadata
References

Affected packages

OSS-Fuzz / librawspeed

Package

Name
librawspeed
Purl
pkg:generic/librawspeed

Affected ranges

Type
GIT
Repo
https://github.com/darktable-org/rawspeed.git
Events
Introduced
5bfa605d26c7496012af159ee2ee3fc345888b95
Fixed
e29d15cda20e6e7c7e1122c30bff7805a2e59fbc

Ecosystem specific 

{
    "severity": "MEDIUM"
}