OSV-2022-258

    Dashboard / Vulnerabilities / OSV-2022-258

    OSV-2022-258

    Published: 19 Mar 2022Last Modified: 13 Apr 2022

    Summary: Heap-double-free in Imf_3_1::RgbaInputFile::~RgbaInputFile

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45718 ``` Crash type: Heap-double-free Crash state: Imf_3_1::RgbaInputFile::~RgbaInputFile Imf_3_1::checkOpenEXRFile openexr_exrcheck_fuzzer.cc ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45718

    Affected packages

    Package

    Name: openexr

    Purl: pkg:generic/openexr

    Affected ranges

    Type: GIT

    Events:

    Introduced- a29fa0510b355647d2d6f216b7733c696ec8c5ac
    Fixed -0b27d291b04924d5228b020247dbd02031d2aa51

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-258 | CVE-DB