OSV-2017-67

    Dashboard / Vulnerabilities / OSV-2017-67

    OSV-2017-67

    Published: 13 Jan 2021Last Modified: 13 Apr 2022

    Summary: Heap-buffer-overflow in OSS_FUZZ_png_combine_row

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3608 ``` Crash type: Heap-buffer-overflow WRITE {*} Crash state: OSS_FUZZ_png_combine_row OSS_FUZZ_png_read_row _start ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3608

    Affected packages

    Package

    Name: libpng

    Purl: pkg:generic/libpng

    Affected ranges

    Type: GIT

    Events:

    Introduced- ab791fc9d69580c1982af726c9f61b533357234f
    Fixed -a3d1057a735d923626f1f6bdc0f662a13d0cba6f

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2017-67 | CVE-DB