OSV-2022-972

Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/skia/OSV-2022-972.yaml
Published
2022-09-28T00:02:05.739495Z
Modified
2023-06-09T14:32:53.192675Z
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51876

Crash type: Use-of-uninitialized-value
Crash state:
SkFindQuadMaxCurvature
AAHairlineOp::onPrepareDraws
GrMeshDrawOp::onPrepare
References

Affected packages

OSS-Fuzz / skia

Package

Name
skia

Affected ranges

Type
GIT
Repo
https://skia.googlesource.com/skia.git
Events
Introduced
13a15693a1834c9d946807f5dd6867932e1d11e8

Affected versions

canvaskit/0.*

canvaskit/0.37.1
canvaskit/0.37.2
canvaskit/0.38.0
canvaskit/0.38.2

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "introduced_range": "bdb042b664e9d6cd30404634188efdcb51adf475:56c606cac39ece14dd9cb66fad4985bc6903b08c"
}