OSV-2026-1095

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2026-1095.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2026-1095

Published

2026-07-30T00:06:16.397282Z

Modified

2026-08-07T14:23:52.482259Z

Summary

Heap-buffer-overflow in grk::t1::CodeblockDecompressImpl::parsePacketData

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540111888

Crash type: Heap-buffer-overflow READ 8
Crash state:
grk::t1::CodeblockDecompressImpl::parsePacketData
grk::PacketParser::readData
grk::PacketParser::parsePacketData

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540111888

Affected packages

OSS-Fuzz / grok

Package

Name: grok
Purl: pkg:generic/grok

Affected ranges

Type: GIT
Repo: https://github.com/GrokImageCompression/grok.git
Events: Introduced

06c96bfbc38c74d386ce27018002d3febfff8f0c

Fixed

553b008061c8fafcb161ae293f489e08abf2e2d1

Affected versions

v20.*

v20.3.5

v20.3.6

v20.3.7

Ecosystem specific

{
    "severity": "MEDIUM"
}

Database specific

fixed_range

"c9c1223c1e7bd7be579ea60e8e083ee244a78f58:553b008061c8fafcb161ae293f489e08abf2e2d1"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2026-1095.yaml"