OSV-2022-934

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-934

Published

2022-09-23T00:01:02.344763Z

Modified

2022-09-23T00:01:02.345005Z

Summary

Index-out-of-bounds in LibRaw::parse_tiff_ifd

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51657

Crash type: Index-out-of-bounds
Crash state:
LibRaw::parse_tiff_ifd
LibRaw::parse_tiff
LibRaw::identify

References

Affected packages

Type: GIT
Repo: https://invent.kde.org/frameworks/kimageformats.git
Events: Introduced

d881a7bbb1562af383bbb6ca20340ad739fb0d13

Fixed

2f27dff48b0838d8530834ed5944a10811226d6d

{
    "severity": "MEDIUM"
}

{
    "fixed_range": "6f3a326cf879f565056d6495ba4f67b8ca0ae687:2f27dff48b0838d8530834ed5944a10811226d6d"
}