OSV-2022-1262

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-1262

Published

2022-12-14T13:00:07.679619Z

Modified

2022-12-14T13:00:07.679889Z

Summary

Heap-use-after-free in HEIFHandler::ensureDecoder

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54246

Crash type: Heap-use-after-free READ 3
Crash state:
HEIFHandler::ensureDecoder
HEIFHandler::read
kimgio_fuzzer.cc

References

Affected packages

Type: GIT
Repo: https://invent.kde.org/frameworks/kimageformats.git
Events: Introduced

a30f043e5d99fa4be5e0c2f0b690d4aadf216549

Fixed

f4ca3f6783bb3d78a9f158efe4874d426b75ae72

{
    "severity": "HIGH"
}