OSV-2025-131

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/OSV-2025-131

Published

2025-02-16T00:13:44.282887Z

Modified

2025-03-18T00:31:43.005790Z

Summary

Heap-buffer-overflow in vips_foreign_save_heif_write_block

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396460413

Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
vips_foreign_save_heif_write_block
wbuffer_write_thread
vips_threadset_work

References

Affected packages

Type: GIT
Repo: https://github.com/libvips/libvips.git
Events: Introduced

7b47b07bcd0583c4f9d4afaac85d3abb5008edff

Fixed

68d859f9b7cc8f7d6748bfc44037e8c233b03d7b

v8.16.1

{
    "severity": "HIGH"
}

{
    "fixed_range": "762f5030c82861a8d4b981cb398f81e70d002bd9:68d859f9b7cc8f7d6748bfc44037e8c233b03d7b"
}