OSV-2021-144

    Dashboard / Vulnerabilities / OSV-2021-144

    OSV-2021-144

    Published: 13 Jan 2021Last Modified: 13 Apr 2022

    Summary: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7171 ``` Crash type: Use-of-uninitialized-value Crash state: rawspeed::RawImageData::checkMemIsInitialized Cr2Decompressor.cpp rawspeed::alignedMalloc ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7171

    Affected packages

    Package

    Name: librawspeed

    Purl: pkg:generic/librawspeed

    Affected ranges

    Type: GIT

    Events:

    Introduced- ad4f8565aa1ed3d2a9afb4ac56e17eeb06f70b8d
    Fixed -d4852ee6da667d164373600d1bc8d205e2cdef6c

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-144 | CVE-DB