Skip to content

Fix out-of-bounds read in CrwMap::decode0x0805 (backport #3462)#3486

Merged
kmilos merged 2 commits intomainfrom
mergify/bp/main/pr-3462
Feb 17, 2026
Merged

Fix out-of-bounds read in CrwMap::decode0x0805 (backport #3462)#3486
kmilos merged 2 commits intomainfrom
mergify/bp/main/pr-3462

Conversation

@mergify
Copy link
Copy Markdown
Contributor

@mergify mergify Bot commented Feb 16, 2026

I've created GHSA-9mxq-4j5g-5wrp for this, but it's a very minor bug and I'm only able to reproduce with our fuzz target, not with the exiv2 command line application. When creating the string, CrwMap::decode0x0805 might read off the end of the buffer. It stops reading when it gets to the first '\0' byte.


This is an automatic backport of pull request #3462 done by Mergify.

@mergify
Copy link
Copy Markdown
Contributor Author

mergify Bot commented Feb 16, 2026

Cherry-pick of 5b8f1f4 has failed:

On branch mergify/bp/main/pr-3462
Your branch is ahead of 'origin/main' by 1 commit.
  (use "git push" to publish your local commits)

You are currently cherry-picking commit 5b8f1f4d.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   src/crwimage_int.cpp

no changes added to commit (use "git add" and/or "git commit -a")

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

@kmilos kmilos merged commit db014be into main Feb 17, 2026
105 of 114 checks passed
@mergify mergify Bot deleted the mergify/bp/main/pr-3462 branch February 17, 2026 08:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants