Vulnerabilities affecting this package (4)
| Advisory |
Summary |
Fixed in package version |
OSV-2022-243
|
Heap-buffer-overflow in grk::PacketIter::next_pcrl OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45537 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: grk::PacketIter::next_pcrl grk::T2Decompress::decompressPackets grk::TileProcessor::decompressT2 ```
|
There are no reported fixed by versions.
|
OSV-2022-245
|
Heap-buffer-overflow in grk::PacketIter::genPrecinctInfo OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45548 ``` Crash type: Heap-buffer-overflow READ 4 Crash state: grk::PacketIter::genPrecinctInfo grk::PacketManager::PacketManager grk::T2Decompress::decompressPackets ```
|
There are no reported fixed by versions.
|
OSV-2022-252
|
Heap-buffer-overflow in grk::PacketLengthMarkers::readPLM OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45622 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: grk::PacketLengthMarkers::readPLM grk::CodeStreamDecompress::process_marker grk::CodeStreamDecompress::readHeaderProcedureImpl ```
|
There are no reported fixed by versions.
|
OSV-2022-295
|
Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev> OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46241 Crash type: Use-of-uninitialized-value Crash state: unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev> std::__1::__function::__func<unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4:: tf::Executor::_invoke
|
There are no reported fixed by versions.
|
This package is not known to fix any advisories.