OSV-2022-945

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-945

Published

2022-09-24T00:01:09.420683Z

Modified

2022-09-24T00:01:09.420915Z

Summary

Heap-buffer-overflow in Exiv2::MemIo::read

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51707

Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
Exiv2::MemIo::read
Exiv2::BasicIo::readOrThrow
Exiv2::QuickTimeVideo::userDataDecoder

References

Affected packages

Type: GIT
Repo: https://github.com/Exiv2/exiv2
Events: Introduced

0a948c6a7d7538e27feef17816406cc5d7769a78

Fixed

0db460c9b0aad040ea1ab0335c3f07d18a0bc4cf

{
    "severity": "HIGH"
}