OSV-2022-330

Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2022-330.yaml
Published
2022-04-11T00:00:12.423473Z
Modified
2023-07-22T14:11:03.219082Z
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46575

Crash type: Stack-use-after-return READ 1
Crash state:
std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i
tf::Executor::_invoke
tf::Executor::_consume_task
References

Affected packages

OSS-Fuzz / grok

Package

Name
grok

Affected ranges

Type
GIT
Repo
https://github.com/GrokImageCompression/grok.git
Events
Introduced
a27b85d5d31dc6da58aa8af859e63448a6384150

Affected versions

v10.*

v10.0.0
v10.0.0.debian
v10.0.1
v10.0.2
v10.0.3
v10.0.4
v10.0.5
v10.0.5.debian
v10.0.6
v10.0.7
v10.0.8

v9.*

v9.7.5
v9.7.5.debian
v9.7.6
v9.7.7
v9.7.8

Ecosystem specific 

{
    "severity": null
}