OSV-2022-1178

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2022-1178.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-1178
Published
2022-11-18T13:00:40.887717Z
Modified
2022-11-27T00:20:07.053947Z
Summary
Heap-buffer-overflow in bytes_copy_rectangle_zero_padding
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53456

Crash type: Heap-buffer-overflow WRITE 7
Crash state:
bytes_copy_rectangle_zero_padding
cmd_put_bits
clist_change_bits
References

Affected packages

OSS-Fuzz / ghostscript

Package

Name
ghostscript
Purl
pkg:generic/ghostscript

Affected ranges

Type
GIT
Repo
git://git.ghostscript.com/ghostpdl.git
Events
Introduced
ee290c1aebaa172c812f21024af2dbf721fa5865
Fixed
db34d54064ae35adc78a499c49363a256f5145f6
Introduced
eb9fc0106d45d1ce81ab2c4ae1a3d6e90a8c0164

Affected versions

ghostpdl-10.*

ghostpdl-10.0.0
ghostpdl-10.0.0rc2

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific 

{
    "introduced_range": "19c421c10385b89da8564d664c2c5679c7558035:1f56d7736465c45a2785d6bb3db1c37289599b40"
}