OSV-2022-149

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2022-149.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-149
Published
2022-02-14T00:00:48.224847Z
Modified
2022-04-13T03:04:34.435603Z
Summary
Heap-buffer-overflow in read_xref_stream_entries
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44610

Crash type: Heap-buffer-overflow WRITE 8
Crash state:
read_xref_stream_entries
pdfi_process_xref_stream
pdfi_read_xref_stream_dict
References

Affected packages

OSS-Fuzz / ghostscript

Package

Name
ghostscript
Purl
pkg:generic/ghostscript

Affected ranges

Type
GIT
Repo
git://git.ghostscript.com/ghostpdl.git
Events
Introduced
4ef76e99d70f3f290120486434abeea24e7c6682
Fixed
30770fce40f0b47c4da1c41e187b45f9f59edc63

Ecosystem specific

{
    "severity": "MEDIUM"
}