PT-2021-28006

Name of the Vulnerable Software and Affected Versions OpenImageIO versions prior to the fixed version are not explicitly stated, however, the issue seems to be related to the Imf 2 5 library. Description The issue is related to a heap-buffer-overflow read error. Technical details about exploitati...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in Imf_2_5::FastHufDecoder::decode

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=4868768916439040 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

opencv:imread_fuzzer: Use-of-uninitialized-value in Imf_opencv::PizCompressor::uncompress

Detailed Report: https://oss-fuzz.com/testcase?key=5769258906419200 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Imfopencv::PizCompressor::uncompress...