OSV-2023-328

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-328

Published

2023-04-20T14:00:08.128442Z

Modified

2023-04-20T14:00:08.128764Z

Summary

Heap-buffer-overflow in RegionItem::parse

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58152

Crash type: Heap-buffer-overflow READ 1
Crash state:
RegionItem::parse
heif::HeifContext::interpret_heif_file
heif::HeifContext::read

References

Affected packages

Type: GIT
Repo: https://github.com/libvips/libvips.git
Events: Introduced

3be16bb5c263f4bd03aa00d20fce186adc396e63

Fixed

e34cbae4b7162db783d3677ac09112394690ccb1

Introduced

f64ae327c10670f46b46e5d64ff5ff5c07816cdc

{
    "severity": "MEDIUM"
}