OSV-2025-444

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/metadata-extractor/OSV-2025-444.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-444
Published
2025-06-07T00:09:40Z
Modified
2026-10-20T12:15:40Z
Summary
Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422822305

Crash type: Security exception
Crash state:
com.drew.imaging.quicktime.QuickTimeReader.processAtoms
com.drew.lang.StreamReader.getByte
com.drew.lang.SequentialReader.getUInt32
References

Affected packages

OSS-Fuzz / metadata-extractor

Package

Name
metadata-extractor
Purl
pkg:generic/metadata-extractor

Affected ranges

Type
GIT
Repo
https://github.com/drewnoakes/metadata-extractor.git
Events
Introduced
0b566c0405424890b8e3f10d991f327af6922219
Fixed
ecffc649b1ff0e29cdac849546b66cf48480073a
Introduced
0c3452bf1c4556724930281ffd97f65b66bfd697

Affected versions

2.*
2.20.0
2.21.0

Ecosystem specific 

{
    "severity":  "LOW"
}

Database specific

fixed_range 
"6f037943c0811799a59b0ea19896cb2b07da17be:ecffc649b1ff0e29cdac849546b66cf48480073a"
introduced_range 
"9f4ad4ce396eb2a0d2d3ec1d730dcd5a374602e7:0c3452bf1c4556724930281ffd97f65b66bfd697"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/metadata-extractor/OSV-2025-444.yaml"