{"id":"OSV-2025-51","aliases":[],"status":"published","title":"Heap-buffer-overflow in std::__1::__function::__func\u003ccv::PngDecoder::compose_frame","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390788198\n\n```\nCrash type: Heap-buffer-overflow WRITE {*}\nCrash state:\nstd::__1::__function::__func\u003ccv::PngDecoder::compose_frame\ncv::ParallelLoopBodyWrapper::operator\ncv::ThreadPool::run\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-01-22T00:03:50.355443Z","modified":"2025-01-24T14:26:07Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"opencv","ranges":[{"type":"GIT","events":[{"introduced":"b4d03256663b6ceb2994c367be4664f282c9f1ec"},{"fixed":"7728dd3387112636912ff9420461ae11e37a732d"},{"fixed":"4a4031dc48475ec3354d28a3cdedda57a8913443"}]}],"versions":["4.11.0"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390788198","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2025-51","title":"Heap-buffer-overflow in std::__1::__function::__func\u003ccv::PngDecoder::compose_frame","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390788198\n\n```\nCrash type: Heap-buffer-overflow WRITE {*}\nCrash state:\nstd::__1::__function::__func\u003ccv::PngDecoder::compose_frame\ncv::ParallelLoopBodyWrapper::operator\ncv::ThreadPool::run\n```\n","status":"published","published":"2025-01-22T00:03:50.355443Z","modified":"2025-01-24T14:26:07.849301Z","updated_at":"2026-11-02T15:52:49.981578Z"}]}}