Skip to content

Comments

Fix out-of-bounds read in CrwMap::decode0x0805#3462

Merged
kevinbackhouse merged 4 commits intoExiv2:0.28.xfrom
kevinbackhouse:fix-ghsa-9mxq-4j5g-5wrp
Feb 16, 2026
Merged

Fix out-of-bounds read in CrwMap::decode0x0805#3462
kevinbackhouse merged 4 commits intoExiv2:0.28.xfrom
kevinbackhouse:fix-ghsa-9mxq-4j5g-5wrp

Conversation

@kevinbackhouse
Copy link
Collaborator

I've created https://github.com/Exiv2/exiv2/security/advisories/GHSA-9mxq-4j5g-5wrp for this, but it's a very minor bug and I'm only able to reproduce with our fuzz target, not with the exiv2 command line application. When creating the string, CrwMap::decode0x0805 might read off the end of the buffer. It stops reading when it gets to the first '\0' byte.

@kevinbackhouse kevinbackhouse added bug OSS-Fuzz Bug reported by https://google.github.io/oss-fuzz/ labels Feb 7, 2026
@kevinbackhouse kevinbackhouse added this to the v0.28.8 milestone Feb 7, 2026
@kevinbackhouse kevinbackhouse added the forward-to-main Forward changes in a 0.28.x PR to main with Mergify label Feb 7, 2026
@codecov
Copy link

codecov bot commented Feb 7, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.98%. Comparing base (7465595) to head (5b8f1f4).
⚠️ Report is 3 commits behind head on 0.28.x.

Additional details and impacted files
@@            Coverage Diff             @@
##           0.28.x    #3462      +/-   ##
==========================================
+ Coverage   64.97%   64.98%   +0.01%     
==========================================
  Files         104      104              
  Lines       22261    22260       -1     
  Branches    10878    10878              
==========================================
+ Hits        14463    14465       +2     
+ Misses       5544     5541       -3     
  Partials     2254     2254              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@kevinbackhouse kevinbackhouse marked this pull request as ready for review February 16, 2026 09:39
@kevinbackhouse kevinbackhouse merged commit cbba4d2 into Exiv2:0.28.x Feb 16, 2026
78 checks passed
@kevinbackhouse kevinbackhouse deleted the fix-ghsa-9mxq-4j5g-5wrp branch February 16, 2026 11:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug forward-to-main Forward changes in a 0.28.x PR to main with Mergify OSS-Fuzz Bug reported by https://google.github.io/oss-fuzz/

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants