Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the DwaCompressoruncompress function due to improper integer arithmetic in pointer calculations. An attacker can cause memory corruption or potentially execute arbitrary code by supplying crafted EXR...

OSV-2023-445 Heap-buffer-overflow in LossyDctDecoder_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59457 Crash type: Heap-buffer-overflow READ 2 Crash state: LossyDctDecoderexecute DwaCompressoruncompress internalexrundodwaa...

OSV-2023-437 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59382 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress DwaCompressoruncompress internalexrundodwaa...