OSV-2020-2093

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-2093

Published

2020-10-23T00:00:43.617858Z

Modified

2022-04-13T03:04:37.610667Z

Summary

Heap-buffer-overflow in ExpandPictureChroma_c

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26570

Crash type: Heap-buffer-overflow WRITE 8
Crash state:
ExpandPictureChroma_c
ExpandReferencingPicture
WelsDec::WelsCheckAndRecoverForFutureDecoding

References

Affected packages

Type: GIT
Repo: https://github.com/cisco/openh264.git
Events: Introduced

f1bb6d3acb057785b4d89e8228e23cc4fc9caa12

Fixed

b52786888ddce9d6bc06b7825ba9bffc65924e0c

{
    "severity": "HIGH"
}