OSV-2022-245

Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2022-245.yaml
Published
2022-03-15T00:01:42.984652Z
Modified
2023-07-22T14:10:55.061574Z
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45548

Crash type: Heap-buffer-overflow READ 4
Crash state:
grk::PacketIter::genPrecinctInfo
grk::PacketManager::PacketManager
grk::T2Decompress::decompressPackets
References

Affected packages

OSS-Fuzz / grok

Package

Name
grok

Affected ranges

Type
GIT
Repo
https://github.com/GrokImageCompression/grok.git
Events

Affected versions

v10.*

v10.0.0
v10.0.0.debian
v10.0.1
v10.0.2
v10.0.3
v10.0.4
v10.0.5
v10.0.5.debian
v10.0.6
v10.0.7
v10.0.8

v9.*

v9.7.2
v9.7.3
v9.7.4
v9.7.4.debian
v9.7.5
v9.7.5.debian
v9.7.6
v9.7.7
v9.7.8

Ecosystem specific

{
    "severity": "MEDIUM"
}