OSV-2022-1159

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-1159

Published

2022-11-10T13:02:24.758084Z

Modified

2022-11-10T13:02:24.758462Z

Summary

Heap-buffer-overflow in LibRaw_buffer_datastream::read

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53158

Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
LibRaw_buffer_datastream::read
LibRaw::uncompressed_fp_dng_load_raw
LibRaw::unpack

References

Affected packages

Type: GIT
Repo: https://github.com/libraw/libraw
Events: Introduced

9b946d94bd65d744538926c2b12957864e187b9b

Fixed

b7771a8e4c01851f7674146e47f7a460633f5e99

0.21-Beta1

{
    "severity": "HIGH"
}