OSV-2023-1177

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/serenity/OSV-2023-1177.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-1177
Published
2023-11-18T13:01:39.155430Z
Modified
2023-11-18T13:01:39.155768Z
Summary
Heap-buffer-overflow in Gfx::ICC::TextDescriptionTagData::from_bytes
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64219

Crash type: Heap-buffer-overflow READ 1
Crash state:
Gfx::ICC::TextDescriptionTagData::from_bytes
Gfx::ICC::Profile::try_load_from_externally_owned_memory
FuzzICCProfile.cpp
References

Affected packages

OSS-Fuzz / serenity

Package

Name
serenity
Purl
pkg:generic/serenity

Affected ranges

Type
GIT
Repo
https://github.com/SerenityOS/serenity
Events
Introduced
6e7a6e2d026aef77395518593b3417a8e6b6e6a7

Ecosystem specific 

{
    "severity": "MEDIUM"
}