{"id":"OSV-2023-328","summary":"Heap-buffer-overflow in RegionItem::parse","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58152\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nRegionItem::parse\nheif::HeifContext::interpret_heif_file\nheif::HeifContext::read\n```\n","modified":"2023-04-20T14:00:08.128764Z","published":"2023-04-20T14:00:08.128442Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58152"}],"affected":[{"package":{"name":"libvips","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libvips"},"ranges":[{"type":"GIT","repo":"https://github.com/libvips/libvips.git","events":[{"introduced":"3be16bb5c263f4bd03aa00d20fce186adc396e63"},{"fixed":"e34cbae4b7162db783d3677ac09112394690ccb1"},{"introduced":"f64ae327c10670f46b46e5d64ff5ff5c07816cdc"}]}],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libvips/OSV-2023-328.yaml"}}],"schema_version":"1.7.3"}