OSV-2023-239

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libhevc/OSV-2023-239.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-239
Published
2023-03-26T13:02:03.445119Z
Modified
2026-06-26T14:09:19.243633Z
Summary
Use-of-uninitialized-value in ihevce_strm_fill_done
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57401

Crash type: Use-of-uninitialized-value
Crash state:
ihevce_strm_fill_done
ihevce_ent_coding_thrd
osal_func
References

Affected packages

OSS-Fuzz / libhevc

Package

Name
libhevc
Purl
pkg:generic/libhevc

Affected ranges

Type
GIT
Repo
https://github.com/ittiam-systems/libhevc.git
Events
Introduced
caae21611ae310e11b711865f8b7aa7db8996d87

Affected versions

v1.*
v1.1.1
v1.2.0
v1.3.0
v1.4.0
v1.5.0
v1.5.1
v1.6.0
v1.7.0
v1.8.0
v1.8.2
v1.8.4

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libhevc/OSV-2023-239.yaml"