OSV-2022-302

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-302

Published

2022-04-05T00:00:09.283355Z

Modified

2022-04-13T03:04:38.007999Z

Summary

Heap-use-after-free in read_markers

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46334

Crash type: Heap-use-after-free READ 4
Crash state:
read_markers
consume_markers
jpeg_consume_input

References

Affected packages

Type: GIT
Repo: https://github.com/libvips/libvips.git
Events: Introduced

89bd46d1c4e0465974b886ef5b5021e988f111a2

Fixed

0f30690360a647360b0c712bd97401caf21f8007

{
    "severity": "HIGH"
}