OSV-2020-303

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dav1d/OSV-2020-303.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-303
Published
2020-06-30T00:00:48.527659Z
Modified
2023-02-24T01:46:54.568363Z
Summary
UNKNOWN READ in dav1d_put_bilin_avx2
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16954

Crash type: UNKNOWN READ
Crash state:
dav1d_put_bilin_avx2
References

Affected packages

OSS-Fuzz / dav1d

Package

Name
dav1d
Purl
pkg:generic/dav1d

Affected ranges

Type
GIT
Repo
https://code.videolan.org/videolan/dav1d.git
Events
Introduced
6ef9a030145eef79fdeab6d4d38e00423ae7a83d
Fixed
69dae683fdce08dabf406787cdd8d1f76a9f0437
Fixed
acad1a99eaaeefacadbd1756c80365665bc7570a

Affected versions

0.*

0.4.0

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "fixed_range": "e2702eaf5f13d5f93be75084a5bfecc77a67c001:acad1a99eaaeefacadbd1756c80365665bc7570a"
}