OSV-2026-1095 Heap-buffer-overflow in grk::t1::CodeblockDecompressImpl::parsePacketData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540111888 Crash type: Heap-buffer-overflow READ 8 Crash state: grk::t1::CodeblockDecompressImpl::parsePacketData grk::PacketParser::readData grk::PacketParser::parsePacketData...

OSV-2026-136 Memcpy-param-overlap in grk::memStreamRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478035120 Crash type: Memcpy-param-overlap Crash state: grk::memStreamRead grk::BufferedStream::read grk::MarkerParser::readSOTorEOC...

OSV-2023-340 Heap-double-free in grk::DecompressCodeblock::release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58285 Crash type: Heap-double-free Crash state: grk::DecompressCodeblock::release grk::t1part1::T1Part1::decompress std::1::function::funcgrk::DecompressScheduler::scheduleBlocks...

OSV-2022-799 Incorrect-function-pointer-type in grk::BufferedStream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50661 Crash type: Incorrect-function-pointer-type Crash state: grk::BufferedStream::read grk::FileFormatDecompress::readboxhdr grk::FileFormatDecompress::readHeaderProcedureImpl...

OSV-2022-501 UNKNOWN WRITE in grk::TileLengthMarkers::seek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48224 Crash type: UNKNOWN WRITE Crash state: grk::TileLengthMarkers::seek grk::CodeStreamDecompress::skipNonScheduledTLM grk::CodeStreamDecompress::parseTileParts...

OSV-2022-336 Use-of-uninitialized-value in grk::N_SCALAR::DecompressIrrev::vtrans

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46594 Crash type: Use-of-uninitialized-value Crash state: grk::NSCALAR::DecompressIrrev::vtrans unsigned long grk::NSCALAR::vscheduler std::1::function::funcunsigned long grk::NSCALAR::vschedulergrk::NSCAL...

OSV-2022-321 Stack-use-after-scope in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<g

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46468 Crash type: Stack-use-after-scope WRITE 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtileg tf::Executor::invoke tf::Executor::consumetask...

OSV-2022-295 Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46241 Crash type: Use-of-uninitialized-value Crash state: unsigned long grk::NSSE4::vscheduler std::1::function::funcunsigned long grk::NSSE4::vschedulergrk::NSSE4:: tf::Executor::invoke...

OSV-2022-252 Heap-buffer-overflow in grk::PacketLengthMarkers::readPLM

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45622 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::PacketLengthMarkers::readPLM grk::CodeStreamDecompress::processmarker grk::CodeStreamDecompress::readHeaderProcedureImpl...

OSV-2021-1768 Heap-buffer-overflow in grk::GrkImage::color_esycc_to_rgb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42958 Crash type: Heap-buffer-overflow READ 16 Crash state: grk::GrkImage::coloresycctorgb grk::GrkImage::colorConvert grkdecompressfuzzer.cpp...

OSV-2021-510 Heap-use-after-free in grk_object_unref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31874 Crash type: Heap-use-after-free READ 8 Crash state: grkobjectunref grk::GrkObjectImpl::release grk::GrkObject::unref...

OSV-2021-456 Heap-buffer-overflow in grk::Quantizer::read_SQcd_SQcc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31460 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::Quantizer::readSQcdSQcc grk::CodeStreamDecompress::readqcd grk::CodeStreamDecompress::processmarker...

OSV-2021-448 Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31365 Crash type: Use-of-uninitialized-value Crash state: std::1::packagedtaskfuncstd::1::bindgrk::mct::decompressirrev std::1::packagedtaskint ThreadPool::ThreadPool...

OSV-2021-426 Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31180 Crash type: Use-of-uninitialized-value Crash state: std::1::packagedtaskfuncstd::1::bindgrk::mct::decompressirrev std::1::packagedtaskint ThreadPool::ThreadPool...

OSV-2021-385 Heap-buffer-overflow in grk::BitIO::bytein

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30863 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::BitIO::bytein grk::BitIO::read grk::T2Decompress::readpacketheader...

OSV-2021-285 Use-of-uninitialized-value in grk::FileFormat::apply_palette_clr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30273 Crash type: Use-of-uninitialized-value Crash state: grk::FileFormat::applypaletteclr grk::FileFormat::decompress grkdecompress...

OSV-2021-36 Use-of-uninitialized-value in grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29413 Crash type: Use-of-uninitialized-value Crash state: grk::mct::decompressirrev grk::TileProcessor::mctdecompress grk::TileProcessor::decompresstilet1...

OSV-2020-2249 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28328 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2243 Heap-buffer-overflow in grk::BitIO::bytein

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28313 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::BitIO::bytein grk::BitIO::read grk::BitIO::getnumpasses...

OSV-2020-2228 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28227 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...