OSV-2022-258

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-258

Published

2022-03-19T00:00:41.775467Z

Modified

2022-04-13T03:04:37.079008Z

Summary

Heap-double-free in Imf_3_1::RgbaInputFile::~RgbaInputFile

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45718

Crash type: Heap-double-free
Crash state:
Imf_3_1::RgbaInputFile::~RgbaInputFile
Imf_3_1::checkOpenEXRFile
openexr_exrcheck_fuzzer.cc

References

Affected packages

Type: GIT
Repo: https://github.com/AcademySoftwareFoundation/openexr
Events: Introduced

a29fa0510b355647d2d6f216b7733c696ec8c5ac

Fixed

0b27d291b04924d5228b020247dbd02031d2aa51

{
    "severity": "HIGH"
}