OSV-2021-1237

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libavc/OSV-2021-1237.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-1237
Published
2021-09-12T00:00:40.701615Z
Modified
2023-02-24T01:42:22.584425Z
Summary
Heap-buffer-overflow in ih264d_parse_decode_slice
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38482

Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_parse_decode_slice
ih264d_parse_nal_unit
ih264d_video_decode
References

Affected packages

OSS-Fuzz / libavc

Package

Name
libavc
Purl
pkg:generic/libavc

Affected ranges

Type
GIT
Repo
https://android.googlesource.com/platform/external/libavc
Events
Introduced
75e53c541e779591bda8ca25217f5023f70369ab
Introduced
620e0296caaf83d276eefb8e217c09856d3be74d
Introduced
651b0ba1356bb1a47fdd9e86d21bfee71a662ff5
Introduced
a7029bb00c882e6d4a143b0d1a55b7fe3e6338b4
Introduced
a88e0683a420d7ee9aa4b6f41f94cb8dc0c5e040
Introduced
b70ba0edef21355a2459062e275936ae298a32c4
Introduced
f6473beaa92ca26e6f0fb1da1f0d19aa4a41b99d
Introduced
fa13b3087684ffefd82d61c34e61714881674cd3
Fixed
2191ac2b82618e4acf73e5247794f51eb01eabd3
Fixed
6a155ff191db9307e91897fc6096e5214a9be0f7
Fixed
23247c81421129686df32536ed9a15b0508acd39
Fixed
45ee63f03a91b91ca6e96ba359cdd92c13830f3c
Fixed
a20b83447dbefd90b21e109fb9d5fcc4d0b1e193
Fixed
dc110841d6a3fb2f9c9f1af04b3b71da40fbd392
Fixed
479c2eab082f4fd9a1aa384cf4e4db6ef6bd907f
Fixed
1f6d235f4ed135fe641712149129730aa2286179

Affected versions

Other
aml_doc_310851020
android-n-iot-release-ihome-igv1
android-n-iot-release-lg-thinq-wk7
android-n-iot-release-polk-at1
android-n-iot-release-smart-display
android-n-iot-release-smart-display-r2
android-o-mr1-iot-preview-6
android-o-mr1-iot-preview-7
android-o-mr1-iot-preview-8
android-o-mr1-iot-release-smart-clock-fcs
android-o-mr1-iot-release-smart-clock-fsi
android-o-mr1-iot-release-smart-clock-r2
android-o-mr1-iot-release-smart-clock-r6
android-o-mr1-iot-release-smart-display-r14
android-o-mr1-iot-release-smart-display-r22
android-o-mr1-iot-release-smart-display-r3
android-o-mr1-iot-release-smart-display-r30
android-o-mr1-iot-release-smart-display-r39
android-o-mr1-iot-release-smart-display-r4
android-o-mr1-iot-release-smart-display-r5
android-o-mr1-iot-release-smart-display-r8
android-o-mr1-iot-release-smart-display-r9
android-p-preview-1
android-p-preview-2
android-p-preview-3
android-p-preview-4
android-p-preview-5
android-q-preview-1
android-q-preview-4
android-q-preview-5
android-q-preview-6
android-r-beta-2
android-r-beta-3
android-r-preview-1
android-r-preview-2
android-r-preview-3
android-r-preview-4
android-s-beta-1
android-s-beta-2
android-s-preview-1
android-s-v2-beta-2
android-s-v2-preview-1
android-s-v2-preview-2
android-wear-p-preview-2
q_tzdata_aml_294400310
android-10.*
android-10.0.0_r12
android-10.0.0_r13
android-10.0.0_r14
android-10.0.0_r7
android-10.0.0_r8
android-10.0.0_r9
android-11.*
android-11.0.0_r1
android-11.0.0_r16
android-11.0.0_r17
android-11.0.0_r18
android-11.0.0_r19
android-11.0.0_r2
android-11.0.0_r20
android-11.0.0_r21
android-11.0.0_r22
android-11.0.0_r23
android-11.0.0_r24
android-11.0.0_r25
android-11.0.0_r26
android-11.0.0_r27
android-11.0.0_r28
android-11.0.0_r29
android-11.0.0_r3
android-11.0.0_r32
android-11.0.0_r33
android-11.0.0_r34
android-11.0.0_r35
android-11.0.0_r36
android-11.0.0_r37
android-11.0.0_r4
android-11.0.0_r43
android-11.0.0_r44
android-11.0.0_r45
android-11.0.0_r46
android-11.0.0_r47
android-11.0.0_r48
android-11.0.0_r5
android-12.*
android-12.0.0_r1
android-12.0.0_r10
android-12.0.0_r11
android-12.0.0_r12
android-12.0.0_r13
android-12.0.0_r14
android-12.0.0_r15
android-12.0.0_r16
android-12.0.0_r18
android-12.0.0_r19
android-12.0.0_r2
android-12.0.0_r20
android-12.0.0_r21
android-12.0.0_r25
android-12.0.0_r26
android-12.0.0_r27
android-12.0.0_r28
android-12.0.0_r29
android-12.0.0_r3
android-12.0.0_r30
android-12.0.0_r31
android-12.0.0_r33
android-12.0.0_r34
android-12.0.0_r4
android-12.0.0_r5
android-12.0.0_r6
android-12.0.0_r7
android-12.0.0_r8
android-12.0.0_r9
android-9.*
android-9.0.0_r1
android-9.0.0_r10
android-9.0.0_r11
android-9.0.0_r12
android-9.0.0_r16
android-9.0.0_r17
android-9.0.0_r18
android-9.0.0_r19
android-9.0.0_r2
android-9.0.0_r20
android-9.0.0_r21
android-9.0.0_r22
android-9.0.0_r3
android-9.0.0_r30
android-9.0.0_r31
android-9.0.0_r32
android-9.0.0_r33
android-9.0.0_r34
android-9.0.0_r35
android-9.0.0_r36
android-9.0.0_r37
android-9.0.0_r40
android-9.0.0_r41
android-9.0.0_r42
android-9.0.0_r43
android-9.0.0_r44
android-9.0.0_r45
android-9.0.0_r47
android-9.0.0_r5
android-9.0.0_r6
android-9.0.0_r7
android-9.0.0_r8
android-9.0.0_r9
android-cts-11.*
android-cts-11.0_r1
android-cts-11.0_r10
android-cts-11.0_r11
android-cts-11.0_r2
android-cts-11.0_r3
android-cts-11.0_r4
android-cts-11.0_r5
android-cts-11.0_r6
android-cts-11.0_r7
android-cts-11.0_r8
android-cts-11.0_r9
android-cts-12.*
android-cts-12.0_r1
android-cts-12.0_r2
android-cts-12.0_r3
android-cts-12.0_r4
android-cts-12.0_r5
android-cts-12.0_r6
android-cts-12.0_r7
android-cts-9.*
android-cts-9.0_r1
android-cts-9.0_r10
android-cts-9.0_r11
android-cts-9.0_r12
android-cts-9.0_r13
android-cts-9.0_r14
android-cts-9.0_r15
android-cts-9.0_r16
android-cts-9.0_r17
android-cts-9.0_r18
android-cts-9.0_r19
android-cts-9.0_r2
android-cts-9.0_r20
android-cts-9.0_r3
android-cts-9.0_r4
android-cts-9.0_r5
android-cts-9.0_r6
android-cts-9.0_r7
android-cts-9.0_r8
android-cts-9.0_r9
android-mainline-10.*
android-mainline-10.0.0_r11
android-mainline-10.0.0_r12
android-mainline-10.0.0_r13
android-mainline-10.0.0_r4
android-mainline-11.*
android-mainline-11.0.0_r12
android-mainline-11.0.0_r13
android-mainline-11.0.0_r14
android-mainline-11.0.0_r15
android-mainline-11.0.0_r16
android-mainline-11.0.0_r17
android-mainline-11.0.0_r18
android-mainline-11.0.0_r20
android-mainline-11.0.0_r21
android-mainline-11.0.0_r22
android-mainline-11.0.0_r23
android-mainline-11.0.0_r24
android-mainline-11.0.0_r25
android-mainline-11.0.0_r26
android-mainline-11.0.0_r27
android-mainline-11.0.0_r28
android-mainline-11.0.0_r30
android-mainline-11.0.0_r31
android-mainline-11.0.0_r32
android-mainline-11.0.0_r34
android-mainline-11.0.0_r35
android-mainline-11.0.0_r36
android-mainline-11.0.0_r37
android-mainline-11.0.0_r38
android-mainline-11.0.0_r39
android-mainline-11.0.0_r40
android-mainline-11.0.0_r41
android-mainline-11.0.0_r42
android-mainline-11.0.0_r43
android-mainline-11.0.0_r44
android-mainline-12.*
android-mainline-12.0.0_r1
android-mainline-12.0.0_r10
android-mainline-12.0.0_r11
android-mainline-12.0.0_r111
android-mainline-12.0.0_r12
android-mainline-12.0.0_r13
android-mainline-12.0.0_r14
android-mainline-12.0.0_r15
android-mainline-12.0.0_r16
android-mainline-12.0.0_r17
android-mainline-12.0.0_r18
android-mainline-12.0.0_r19
android-mainline-12.0.0_r2
android-mainline-12.0.0_r20
android-mainline-12.0.0_r21
android-mainline-12.0.0_r22
android-mainline-12.0.0_r23
android-mainline-12.0.0_r24
android-mainline-12.0.0_r25
android-mainline-12.0.0_r26
android-mainline-12.0.0_r27
android-mainline-12.0.0_r28
android-mainline-12.0.0_r29
android-mainline-12.0.0_r3
android-mainline-12.0.0_r30
android-mainline-12.0.0_r31
android-mainline-12.0.0_r33
android-mainline-12.0.0_r34
android-mainline-12.0.0_r35
android-mainline-12.0.0_r36
android-mainline-12.0.0_r37
android-mainline-12.0.0_r38
android-mainline-12.0.0_r39
android-mainline-12.0.0_r4
android-mainline-12.0.0_r40
android-mainline-12.0.0_r41
android-mainline-12.0.0_r42
android-mainline-12.0.0_r43
android-mainline-12.0.0_r44
android-mainline-12.0.0_r45
android-mainline-12.0.0_r46
android-mainline-12.0.0_r47
android-mainline-12.0.0_r48
android-mainline-12.0.0_r49
android-mainline-12.0.0_r5
android-mainline-12.0.0_r50
android-mainline-12.0.0_r51
android-mainline-12.0.0_r52
android-mainline-12.0.0_r53
android-mainline-12.0.0_r54
android-mainline-12.0.0_r56
android-mainline-12.0.0_r57
android-mainline-12.0.0_r58
android-mainline-12.0.0_r6
android-mainline-12.0.0_r7
android-mainline-12.0.0_r8
android-mainline-12.0.0_r9
android-o-mr1-iot-release-1.*
android-o-mr1-iot-release-1.0.0
android-o-mr1-iot-release-1.0.1
android-o-mr1-iot-release-1.0.10
android-o-mr1-iot-release-1.0.12
android-o-mr1-iot-release-1.0.13
android-o-mr1-iot-release-1.0.14
android-o-mr1-iot-release-1.0.2
android-o-mr1-iot-release-1.0.3
android-o-mr1-iot-release-1.0.4
android-o-mr1-iot-release-1.0.5
android-o-mr1-iot-release-1.0.7
android-o-mr1-iot-release-1.0.8
android-o-mr1-iot-release-smart-display-r40.*
android-o-mr1-iot-release-smart-display-r40.1J
android-platform-11.*
android-platform-11.0.0_r1
android-platform-11.0.0_r10
android-platform-11.0.0_r11
android-platform-11.0.0_r12
android-platform-11.0.0_r13
android-platform-11.0.0_r14
android-platform-11.0.0_r2
android-platform-11.0.0_r3
android-platform-11.0.0_r4
android-platform-11.0.0_r5
android-platform-11.0.0_r6
android-platform-11.0.0_r7
android-platform-11.0.0_r8
android-platform-11.0.0_r9
android-platform-12.*
android-platform-12.0.0_r1
android-platform-12.0.0_r2
android-platform-12.0.0_r3
android-q-preview-2.*
android-q-preview-2.5
android-security-10.*
android-security-10.0.0_r58
android-security-10.0.0_r59
android-security-10.0.0_r60
android-security-10.0.0_r61
android-security-10.0.0_r62
android-security-10.0.0_r63
android-security-11.*
android-security-11.0.0_r1
android-security-11.0.0_r49
android-security-11.0.0_r50
android-security-11.0.0_r51
android-security-11.0.0_r52
android-security-8.*
android-security-8.1.0_r92
android-security-8.1.0_r93
android-security-9.*
android-security-9.0.0_r72
android-security-9.0.0_r73
android-security-9.0.0_r74
android-security-9.0.0_r75
android-security-9.0.0_r76
android-vts-11.*
android-vts-11.0_r1
android-vts-11.0_r10
android-vts-11.0_r11
android-vts-11.0_r2
android-vts-11.0_r3
android-vts-11.0_r4
android-vts-11.0_r5
android-vts-11.0_r6
android-vts-11.0_r7
android-vts-11.0_r8
android-vts-11.0_r9
android-vts-12.*
android-vts-12.0_r1
android-vts-12.0_r2
android-vts-12.0_r3
android-vts-12.0_r4
android-vts-12.0_r5
android-vts-12.0_r6
android-vts-12.0_r7
android-vts-9.*
android-vts-9.0_r10
android-vts-9.0_r11
android-vts-9.0_r12
android-vts-9.0_r13
android-vts-9.0_r14
android-vts-9.0_r15
android-vts-9.0_r16
android-vts-9.0_r17
android-vts-9.0_r18
android-vts-9.0_r19
android-vts-9.0_r4
android-vts-9.0_r5
android-vts-9.0_r6
android-vts-9.0_r7
android-vts-9.0_r8
android-vts-9.0_r9
android-wear-8.*
android-wear-8.0.0_r1
android-wear-8.0.0_r2
android-wear-9.*
android-wear-9.0.0_r1
android-wear-9.0.0_r10
android-wear-9.0.0_r11
android-wear-9.0.0_r12
android-wear-9.0.0_r13
android-wear-9.0.0_r14
android-wear-9.0.0_r15
android-wear-9.0.0_r16
android-wear-9.0.0_r17
android-wear-9.0.0_r18
android-wear-9.0.0_r19
android-wear-9.0.0_r2
android-wear-9.0.0_r20
android-wear-9.0.0_r21
android-wear-9.0.0_r22
android-wear-9.0.0_r23
android-wear-9.0.0_r24
android-wear-9.0.0_r25
android-wear-9.0.0_r26
android-wear-9.0.0_r27
android-wear-9.0.0_r28
android-wear-9.0.0_r29
android-wear-9.0.0_r3
android-wear-9.0.0_r30
android-wear-9.0.0_r31
android-wear-9.0.0_r32
android-wear-9.0.0_r33
android-wear-9.0.0_r34
android-wear-9.0.0_r4
android-wear-9.0.0_r5
android-wear-9.0.0_r6
android-wear-9.0.0_r7
android-wear-9.0.0_r8
android-wear-9.0.0_r9
platform-tools-29.*
platform-tools-29.0.1
platform-tools-29.0.2
platform-tools-29.0.3
platform-tools-29.0.4
platform-tools-29.0.5
platform-tools-29.0.6
platform-tools-30.*
platform-tools-30.0.0
platform-tools-30.0.1
platform-tools-30.0.2
platform-tools-30.0.3
platform-tools-30.0.4
platform-tools-30.0.5
platform-tools-31.*
platform-tools-31.0.0
platform-tools-31.0.1
platform-tools-31.0.2
platform-tools-31.0.3

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libavc/OSV-2021-1237.yaml"