lcms: Heap-buffer-overflow in TetrahedralInterpFloat

2017-01-10T02:58:18
ID OSSFUZZ-396
Type ossfuzz
Reporter Google
Modified 2017-02-24T03:32:44

Description

Project: https://github.com/mm2/Little-CMS.git

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4751616032899072

Project: lcms Fuzzer: libFuzzer_lcms_cms_transform_fuzzer Fuzz target binary: cms_transform_fuzzer Job Type: libfuzzer_asan_lcms Platform Id: linux

Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6130000014e0 Crash State: TetrahedralInterpFloat Eval4InputsFloat Eval5InputsFloat

Sanitizer: address (ASAN)

Recommended Security Severity: Medium

Minimized Testcase (0.95 Kb): https://clusterfuzz-external.appspot.com/download/AMIfv94a_5qLOlJ9C5nTu9O7f7rfm3RECgDD1cHnpm86BeLppmTWYnk-Z2yc58RuxhzGdKT4GzjiWSl5EFLzKnQkPS6Zb8giic4btcENTtFEa0ZitQbYiI-cvWE3wTjXJEjuoaWc_NClz1NzWsIshwWTHe0BsNrdcinmGFG5kv5zb-keOGqIV8bC3hyBzLqk-lU81LCQwfOop413TiS3U7O3EQJaLyLwbtaZTZUgsLzKLDqjHLOczPhynZd6dzscRA83BwBiVxH9ySQTZAdM_jtCbu7RiYL_1X4sZrhAgK_5yTfJN62Mff6BP-_5QLH3ml3bfjtZ3nBHQYOq_KbTD3meAcEf6uUA3uaGA5tTsGN6zQgVAUR8RcY4K1lnQW2Z8btSwe-p21A-yRtGs_i9IxsIaQllMpbq9HvZ-GDjmAq_bdnHzc6XzjQ?testcase_id=4751616032899072

Issue filed automatically.

See https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.

This bug is subject to a 90 day disclosure deadline. If 90 days elapse without an upstream patch, then the bug report will automatically become visible to the public.