OSV-2022-799 Incorrect-function-pointer-type in grk::BufferedStream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50661 Crash type: Incorrect-function-pointer-type Crash state: grk::BufferedStream::read grk::FileFormatDecompress::readboxhdr grk::FileFormatDecompress::readHeaderProcedureImpl...

CVE-2021-36089

Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::applypaletteclr called from grk::FileFormatDecompress::applyColour...

PT-2021-21110

Name of the Vulnerable Software and Affected Versions: Grok versions 7.6.6 through 9.2.0 Description: The issue is a heap-based buffer overflow in the grk::FileFormatDecompress::apply palette clr function, which is called from grk::FileFormatDecompress::applyColour. Recommendations: For Grok...

CVE-2021-36089: Out-of-bounds Write

Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::applypaletteclr called from grk::FileFormatDecompress::applyColour...

PT-2021-28224

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the function names apply palette clr and applyColour, whi...