OSV-2025-16

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/opencv/OSV-2025-16.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-16
Published
2025-01-08T00:13:45.160139Z
Modified
2025-01-08T00:13:45.160518Z
Summary
UNKNOWN READ in png_free_data
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386860184

Crash type: UNKNOWN READ
Crash state:
png_free_data
png_destroy_info_struct
png_destroy_read_struct
References

Affected packages

OSS-Fuzz / opencv

Package

Name
opencv
Purl
pkg:generic/opencv

Affected ranges

Type
GIT
Repo
https://github.com/opencv/opencv.git
Events
Introduced
d39aae6bdfc1a45553e1426334a9c72848354261
Fixed
f00814e38db556ad7a31e6dee203e41eea48e7a6

Affected versions

4.*

4.11.0

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "introduced_range": "9c33baebbd262ed6f45436cf71d5f7a50907e9fe:8bc65a1d136c2ac4c31910ee271b5f3c9d14317e",
    "fixed_range": "bdb6a968ce69a2bf7c34724f9052c20e941ab47b:f00814e38db556ad7a31e6dee203e41eea48e7a6"
}