OSV-2022-309

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libvips/OSV-2022-309.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-309
Published
2022-04-06T00:00:33.512236Z
Modified
2022-04-13T03:04:38.013782Z
Summary
UNKNOWN READ in decompress_smooth_data
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46349

Crash type: UNKNOWN READ
Crash state:
decompress_smooth_data
process_data_simple_main
jpeg_read_scanlines
References

Affected packages

OSS-Fuzz / libvips

Package

Name
libvips
Purl
pkg:generic/libvips

Affected ranges

Type
GIT
Repo
https://github.com/libvips/libvips.git
Events
Introduced
9228e50f46b79dc448b9416a5ae1dfdcfdfcf98c
Fixed
0f30690360a647360b0c712bd97401caf21f8007
Fixed
2dc319b1b1610e4c8ae95b8ca47b46926cd41ce1

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "introduced_range": "dc07b0005960687b7ec541b0a3714210e1e16f6a:89bd46d1c4e0465974b886ef5b5021e988f111a2",
    "fixed_range": "89bd46d1c4e0465974b886ef5b5021e988f111a2:2dc319b1b1610e4c8ae95b8ca47b46926cd41ce1"
}