OSV-2020-1840

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libavif/OSV-2020-1840.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-1840
Published
2020-09-25T00:00:39.613381Z
Modified
2022-04-13T03:04:41.892196Z
Summary
Heap-use-after-free in avifFileTypeIsCompatible
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25910

Crash type: Heap-use-after-free READ 4
Crash state:
avifFileTypeIsCompatible
avifDecoderParse
avif_decode_fuzzer.cc
References

Affected packages

OSS-Fuzz / libavif

Package

Name
libavif
Purl
pkg:generic/libavif

Affected ranges

Type
GIT
Repo
https://github.com/AOMediaCodec/libavif.git
Events
Introduced
16104711fe1a92cadb454e6330cc343c7cdfd00e
Fixed
468ded88b6ee5ccc4ce1ed029a7d310e5764947c
Fixed
76556c4c24cb935039e1ba87006d80fb513a8d7b

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific 

{
    "fixed_range": "3c7cfd95cac1680c5722805ef30f71a247473567:76556c4c24cb935039e1ba87006d80fb513a8d7b"
}