Vulnerabilities affecting this package (7)
| Advisory |
Summary |
Fixed in package version |
OSV-2022-245
|
Heap-buffer-overflow in grk::PacketIter::genPrecinctInfo OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45548 ``` Crash type: Heap-buffer-overflow READ 4 Crash state: grk::PacketIter::genPrecinctInfo grk::PacketManager::PacketManager grk::T2Decompress::decompressPackets ```
|
There are no reported fixed by versions.
|
OSV-2022-252
|
Heap-buffer-overflow in grk::PacketLengthMarkers::readPLM OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45622 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: grk::PacketLengthMarkers::readPLM grk::CodeStreamDecompress::process_marker grk::CodeStreamDecompress::readHeaderProcedureImpl ```
|
There are no reported fixed by versions.
|
OSV-2022-295
|
Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev> OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46241 Crash type: Use-of-uninitialized-value Crash state: unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev> std::__1::__function::__func<unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4:: tf::Executor::_invoke
|
There are no reported fixed by versions.
|
OSV-2022-330
|
Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46575 ``` Crash type: Stack-use-after-return READ 1 Crash state: std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i tf::Executor::_invoke tf::Executor::_consume_task ```
|
There are no reported fixed by versions.
|
OSV-2022-336
|
Use-of-uninitialized-value in grk::N_SCALAR::DecompressIrrev::vtrans OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46594 Crash type: Use-of-uninitialized-value Crash state: grk::N_SCALAR::DecompressIrrev::vtrans unsigned long grk::N_SCALAR::vscheduler<grk::N_SCALAR::DecompressIrrev> std::__1::__function::__func<unsigned long grk::N_SCALAR::vscheduler<grk::N_SCAL
|
There are no reported fixed by versions.
|
OSV-2022-799
|
Incorrect-function-pointer-type in grk::BufferedStream::read OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50661 ``` Crash type: Incorrect-function-pointer-type Crash state: grk::BufferedStream::read grk::FileFormatDecompress::read_box_hdr grk::FileFormatDecompress::readHeaderProcedureImpl ```
|
There are no reported fixed by versions.
|
OSV-2023-340
|
Heap-double-free in grk::DecompressCodeblock::release OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58285 ``` Crash type: Heap-double-free Crash state: grk::DecompressCodeblock::release grk::t1_part1::T1Part1::decompress std::__1::__function::__func<grk::DecompressScheduler::scheduleBlocks ```
|
There are no reported fixed by versions.
|
This package is not known to fix any advisories.