{"id":"OSV-2025-190","aliases":[],"status":"published","title":"Heap-buffer-overflow in std::__1::__function::__func\u003ccv::PngDecoder::compose_frame","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=401712861\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nstd::__1::__function::__func\u003ccv::PngDecoder::compose_frame\ncv::ParallelLoopBodyWrapper::operator\ncv::ParallelJob::execute\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-03-11T00:04:32.361664Z","modified":"2025-03-11T00:04:32Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"opencv","ranges":[{"type":"GIT","events":[{"introduced":"b4d03256663b6ceb2994c367be4664f282c9f1ec"},{"fixed":"e30697fd42b36960ed0fcf5d2c927f11e6f191bc"}]}],"versions":["4.11.0","5.0.0-alpha"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=401712861","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2025-190","title":"Heap-buffer-overflow in std::__1::__function::__func\u003ccv::PngDecoder::compose_frame","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=401712861\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nstd::__1::__function::__func\u003ccv::PngDecoder::compose_frame\ncv::ParallelLoopBodyWrapper::operator\ncv::ParallelJob::execute\n```\n","status":"published","published":"2025-03-11T00:04:32.361664Z","modified":"2025-03-11T00:04:32.362119Z","updated_at":"2026-11-02T15:52:49.981578Z"}]}}