{"id":"OSV-2022-976","aliases":[],"status":"published","title":"Heap-buffer-overflow in SkPath::Iter::next","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51925\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nSkPath::Iter::next\nSkParsePath::ToSVGString\nSkSVGDevice::drawPath\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-09-29T00:00:20.329874Z","modified":"2022-09-29T00:00:20Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"skia","ranges":[{"type":"GIT","events":[{"introduced":"13a15693a1834c9d946807f5dd6867932e1d11e8"},{"fixed":"652b26b1ab54dcb78f04c4b11c1f82b638031f1f"},{"fixed":"0e44b6a2859ce2fc75bb58423e4148951b4f8e79"}]}]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51925","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2022-976","title":"Heap-buffer-overflow in SkPath::Iter::next","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51925\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nSkPath::Iter::next\nSkParsePath::ToSVGString\nSkSVGDevice::drawPath\n```\n","status":"published","published":"2022-09-29T00:00:20.329874Z","modified":"2022-09-29T00:00:20.330121Z","updated_at":"2026-11-02T15:52:49.511349Z"}]}}