OSV-2022-1128 Heap-buffer-overflow in void rawspeed::DngOpcodes::PixelOpcode::applyOP<unsigned short, rawspeed::DngOpc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52944 Crash type: Heap-buffer-overflow READ 4 Crash state: void rawspeed::DngOpcodes::PixelOpcode::applyOPunsigned short, rawspeed::DngOpc rawspeed::DngOpcodes::applyOpCodes rawspeed::DngDecoder::handleMetadata...

PT-2022-36734 · Rawspeed · Rawspeed

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the applyOP function of DngOpcodes::PixelOpcode when handling metadata in DngDecoder. Technical details include t...

librawspeed:TiffDecoderFuzzer-DngDecoder: Heap-buffer-overflow in void rawspeed::DngOpcodes::PixelOpcode::applyOP<unsigned short, rawspeed::DngOpc

Project: https://github.com/darktable-org/rawspeed.git Detailed Report: https://oss-fuzz.com/testcase?key=6606402785509376 Project: librawspeed Fuzzing Engine: afl Fuzz Target: TiffDecoderFuzzer-DngDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cra...

librawspeed:TiffDecoderFuzzer-DngDecoder: Use-after-poison in rawspeed::DngOpcodes::LookupOpcode::apply

Project: https://github.com/darktable-org/rawspeed.git Detailed Report: https://oss-fuzz.com/testcase?key=5118943375261696 Project: librawspeed Fuzzing Engine: afl Fuzz Target: TiffDecoderFuzzer-DngDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash Type: Use-after-poison READ 2 Crash...