{"id":"OSV-2022-58","summary":"Heap-buffer-overflow in internal_huf_decompress","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43763\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ninternal_huf_decompress\ninternal_exr_undo_piz\ndefault_decompress_chunk\n```\n","modified":"2022-04-13T03:04:37.212914Z","published":"2022-01-19T00:01:46.235163Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43763"}],"affected":[{"package":{"name":"openexr","ecosystem":"OSS-Fuzz","purl":"pkg:generic/openexr"},"ranges":[{"type":"GIT","repo":"https://github.com/AcademySoftwareFoundation/openexr","events":[{"introduced":"236c4b2782d787d56ddc586ed4a313c1d31acd95"},{"fixed":"434776bd0e9d6c911a0dd60d234af49fca48b3c1"},{"introduced":"e598a72aa0166bfab8947eb691ba473a54bfed06"},{"fixed":"360b9915cdfebcc42a5d773ec58c2ea228dc48ba"},{"fixed":"aeaf98f8ad0ce6c1c84a776fedfbdb38bee98af7"}]}],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"fixed_range":"a29fa0510b355647d2d6f216b7733c696ec8c5ac:aeaf98f8ad0ce6c1c84a776fedfbdb38bee98af7","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2022-58.yaml"}}],"schema_version":"1.7.3"}