OSV-2023-340

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2023-340.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-340
Published
2023-04-24T14:00:30.054535Z
Modified
2023-06-20T14:14:43.265931Z
Summary
Heap-double-free in grk::DecompressCodeblock::release
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58285

Crash type: Heap-double-free
Crash state:
grk::DecompressCodeblock::release
grk::t1_part1::T1Part1::decompress
std::__1::__function::__func<grk::DecompressScheduler::scheduleBlocks
References

Affected packages

OSS-Fuzz / grok

Package

Name
grok
Purl
pkg:generic/grok

Affected ranges

Type
GIT
Repo
https://github.com/GrokImageCompression/grok.git
Events
Introduced
73ef6711005759b4dc91381f6cdf1cba6d36b59f
Fixed
faa589e382bf7bd63f24e2042210db3ee912227f

Affected versions

v10.*

v10.0.0
v10.0.1
v10.0.2
v10.0.3
v10.0.4
v10.0.5
v10.0.5.debian
v10.0.6

v9.*

v9.7.8

Ecosystem specific 

{
    "severity": "HIGH"
}