OSV-2022-310

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-310

Published

2022-04-06T00:00:40.210191Z

Modified

2022-04-13T03:04:38.124312Z

Summary

Heap-use-after-free in jpeg_fill_bit_buffer

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46343

Crash type: Heap-use-after-free WRITE 4
Crash state:
jpeg_fill_bit_buffer
jpeg_huff_decode
decode_mcu

References

Affected packages

Type: GIT
Repo: https://github.com/libvips/libvips.git
Events: Introduced

89bd46d1c4e0465974b886ef5b5021e988f111a2

Fixed

2dc319b1b1610e4c8ae95b8ca47b46926cd41ce1

{
    "severity": "HIGH"
}

{
    "fixed_range": "89bd46d1c4e0465974b886ef5b5021e988f111a2:2dc319b1b1610e4c8ae95b8ca47b46926cd41ce1"
}