OSV-2023-709

    Dashboard / Vulnerabilities / OSV-2023-709

    OSV-2023-709

    Published: 18 Aug 2023Last Modified: 20 Aug 2023

    Summary: Heap-buffer-overflow in QOIHandler::read

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61528 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: QOIHandler::read kimgio_fuzzer.cc ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61528

    Affected packages

    Package

    Name: kimageformats

    Purl: pkg:generic/kimageformats

    Affected ranges

    Type: GIT

    Events:

    Introduced- dd4576a4729cc9c44d0a7f10cad02331402afd45
    Fixed -274f30e00840cfe0d4476f3b7959cf847a4f9104

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-709 | CVE-DB