skcms/iccprofile_transform: Index-out-of-bounds in read_mft_common

2018-02-23T07:30:49

Description

Project: https://skia.googlesource.com/skcms.git Detailed report: https://oss-fuzz.com/testcase?key=5168080767418368 Project: skcms Fuzzer: libFuzzer_skcms_iccprofile_transform Fuzz target binary: iccprofile_transform Job Type: libfuzzer_ubsan_skcms Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: read_mft_common read_tag_mft2 read_a2b Sanitizer: undefined (UBSAN) Recommended Security Severity: Medium Regressed: https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_skcms&range=201802220545:201802230544 Reproducer Testcase: https://oss-fuzz.com/download?testcase_id=5168080767418368 Issue filed automatically. See https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information. This bug is subject to a 90 day disclosure deadline. If 90 days elapse without an upstream patch, then the bug report will automatically become visible to the public. When you fix this bug, please * mention the fix revision(s). * state whether the bug was a short-lived regression or an old bug in any stable releases. * add any other useful information. This information can help downstream consumers. If you have questions for the OSS-Fuzz team, please file an issue at https://github.com/google/oss-fuzz/issues.

Affected Software

CPE Name	Name	Version
	skcms	unknown

{"id": "OSSFUZZ-6521", "type": "ossfuzz", "bulletinFamily": "software", "title": "skcms/iccprofile_transform: Index-out-of-bounds in read_mft_common", "description": "Project:\nhttps://skia.googlesource.com/skcms.git\n\nDetailed report: https://oss-fuzz.com/testcase?key=5168080767418368\n\nProject: skcms\nFuzzer: libFuzzer_skcms_iccprofile_transform\nFuzz target binary: iccprofile_transform\nJob Type: libfuzzer_ubsan_skcms\nPlatform Id: linux\n\nCrash Type: Index-out-of-bounds\nCrash Address: \nCrash State:\n read_mft_common\n read_tag_mft2\n read_a2b\n \nSanitizer: undefined (UBSAN)\n\nRecommended Security Severity: Medium\n\nRegressed: https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_skcms&range=201802220545:201802230544\n\nReproducer Testcase: https://oss-fuzz.com/download?testcase_id=5168080767418368\n\nIssue filed automatically.\n\nSee https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.\n\nThis bug is subject to a 90 day disclosure deadline. If 90 days elapse\nwithout an upstream patch, then the bug report will automatically\nbecome visible to the public.\n\nWhen you fix this bug, please\n * mention the fix revision(s).\n * state whether the bug was a short-lived regression or an old bug in any stable releases.\n * add any other useful information.\nThis information can help downstream consumers.\n\nIf you have questions for the OSS-Fuzz team, please file an issue at https://github.com/google/oss-fuzz/issues.", "published": "2018-02-23T07:30:49", "modified": "2018-03-26T15:22:11", "cvss": {}, "href": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6521", "reporter": "Google", "references": [], "cvelist": [], "lastseen": "2020-04-03T22:45:14", "viewCount": 4, "enchantments": {"dependencies": {}, "score": {"value": -0.6, "vector": "NONE"}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.6}, "ossfuzz": {"issue": 6521, "status": "Verified", "project": "skcms", "ref": "https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_skcms&range=201802230544:201802240539", "crashType": "Index-out-of-bounds", "revisions": ["c5472f44e1a2c15eb60bc2fd4255c67b9004f11f:4cbf9f959ddab290f1fcf12719d5bbcb195b9ae6"], "project_repos": ["https://skia.googlesource.com/skcms.git"], "tags": []}, "affectedSoftware": [{"name": "skcms", "version": "unknown", "operator": "eq"}], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645524178, "score": 1659818015, "affected_software_major_version": 1677286885, "epss": 1678893030}, "_internal": {"score_hash": "6e0a99c909bcc7c68dc5ee98c531dd2d"}}