OSV-2020-370

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libavc/OSV-2020-370.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-370

Published

2020-07-01T00:00:05.612589Z

Modified

2022-04-13T03:36:38.304614Z

Summary

Heap-use-after-free in ih264_inter_pred_luma_horz_hpel_vert_qpel_ssse3

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18595

Crash type: Heap-use-after-free READ 16
Crash state:
ih264_inter_pred_luma_horz_hpel_vert_qpel_ssse3
ih264d_motion_compensate_mp
ih264d_decode_recon_tfr_nmb

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18595

Affected packages

OSS-Fuzz / libavc

Package

Name: libavc
Purl: pkg:generic/libavc

Affected ranges

Type: GIT
Repo: https://android.googlesource.com/platform/external/libavc
Events: Introduced

976012797811d3c1a15fdb73755c960d239a7ae8

Fixed

942e7f88963d5b99a2a73c271667c5132252bd0c

Affected versions

android-10.*

android-10.0.0_r12

android-10.0.0_r13

android-10.0.0_r14

android-10.0.0_r7

android-10.0.0_r8

android-10.0.0_r9

android-mainline-10.*

android-mainline-10.0.0_r4

Other

android-r-preview-1

platform-tools-29.*

platform-tools-29.0.5

platform-tools-29.0.6

Ecosystem specific

{
    "severity": "HIGH"
}