{"id":"OSV-2024-1417","summary":"Heap-buffer-overflow in cv::PngDecoder::read_from_io","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386688710\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\ncv::PngDecoder::read_from_io\ncv::PngDecoder::read_chunk\ncv::PngDecoder::readHeader\n```\n","modified":"2025-01-02T00:15:00.247102Z","published":"2025-01-02T00:15:00.246767Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386688710"}],"affected":[{"package":{"name":"opencv","ecosystem":"OSS-Fuzz","purl":"pkg:generic/opencv"},"ranges":[{"type":"GIT","repo":"https://github.com/opencv/opencv.git","events":[{"introduced":"d39aae6bdfc1a45553e1426334a9c72848354261"},{"fixed":"12963ea6995fa7dbf6a113038a6a6fd920b0e588"},{"fixed":"a6f72f813d307f77e7597447bdba25dcb5b6447d"}]}],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"fixed_range":"4d26e16af8f45dc8d356770749ae273c8992aa4e:a6f72f813d307f77e7597447bdba25dcb5b6447d","introduced_range":"9c33baebbd262ed6f45436cf71d5f7a50907e9fe:8bc65a1d136c2ac4c31910ee271b5f3c9d14317e","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/opencv/OSV-2024-1417.yaml"}}],"schema_version":"1.7.3"}