Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/grok@9.7.2
purl pkg:generic/grok@9.7.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
OSV-2022-243

Heap-buffer-overflow in grk::PacketIter::next_pcrl OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45537 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: grk::PacketIter::next_pcrl grk::T2Decompress::decompressPackets grk::TileProcessor::decompressT2 ``` There are no reported fixed by versions.
OSV-2022-245

Heap-buffer-overflow in grk::PacketIter::genPrecinctInfo OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45548 ``` Crash type: Heap-buffer-overflow READ 4 Crash state: grk::PacketIter::genPrecinctInfo grk::PacketManager::PacketManager grk::T2Decompress::decompressPackets ``` There are no reported fixed by versions.
OSV-2022-252

Heap-buffer-overflow in grk::PacketLengthMarkers::readPLM OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45622 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: grk::PacketLengthMarkers::readPLM grk::CodeStreamDecompress::process_marker grk::CodeStreamDecompress::readHeaderProcedureImpl ``` There are no reported fixed by versions.
This package is not known to fix any advisories.