{"id":"OSV-2020-1610","summary":"Segv on unknown address in Imf_2_5::hufUncompress","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24854\n\n```\nCrash type: Segv on unknown address\nCrash state:\nImf_2_5::hufUncompress\nImf_2_5::DwaCompressor::uncompress\nImf_2_5::DwaCompressor::uncompress\n```\n","modified":"2022-04-13T03:37:36.826015Z","published":"2020-08-14T00:01:49.720909Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24854"}],"affected":[{"package":{"name":"openexr","ecosystem":"OSS-Fuzz","purl":"pkg:generic/openexr"},"ranges":[{"type":"GIT","repo":"https://github.com/AcademySoftwareFoundation/openexr","events":[{"introduced":"c7af102e6bce6638add2f38576ffe9c6741ba768"},{"fixed":"b0c63c0b96eb9b0d3998f603e12f9f414fb0d44a"},{"introduced":"9752e70d31193f649eb5286bb649916ecfcc51ea"}]}],"versions":["v2.5.3","v2.5.4","v2.5.5","v2.5.6","v2.5.7","v2.5.7-rc1","v2.5.8"],"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2020-1610.yaml"}}],"schema_version":"1.7.3"}