OSV-2022-336

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2022-336.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-336
Published
2022-04-12T00:00:32.150063Z
Modified
2023-07-22T14:10:59.966993Z
Summary
Use-of-uninitialized-value in grk::N_SCALAR::DecompressIrrev::vtrans
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46594

Crash type: Use-of-uninitialized-value Crash state: grk::NSCALAR::DecompressIrrev::vtrans unsigned long grk::NSCALAR::vscheduler<grk::N_SCALAR::DecompressIrrev> std::1::function::_func<unsigned long grk::NSCALAR::vscheduler<grk::N_SCAL

References

Affected packages

OSS-Fuzz / grok

Package

Name
grok
Purl
pkg:generic/grok

Affected ranges

Type
GIT
Repo
https://github.com/GrokImageCompression/grok.git
Events
Introduced
6b45934c6d0682de97d8e9652da85213648f9df8

Affected versions

v10.*

v10.0.0
v10.0.0.debian
v10.0.1
v10.0.2
v10.0.3
v10.0.4
v10.0.5
v10.0.5.debian
v10.0.6
v10.0.7
v10.0.8

v9.*

v9.7.5.debian
v9.7.6
v9.7.7
v9.7.8

Ecosystem specific 

{
    "severity": "MEDIUM"
}