OSV-2025-620

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2025-620

Published

2025-08-12T00:14:23.793424Z

Modified

2025-08-12T00:14:23.793828Z

Summary

Heap-buffer-overflow in FragPrepareChunk

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437694938

Crash type: Heap-buffer-overflow WRITE 8
Crash state:
FragPrepareChunk
DemuxFrag
demux_process_stream

References

Affected packages

Type: GIT
Repo: https://code.videolan.org/videolan/vlc.git
Events: Introduced

f8e9d090fc20452cfddb91df28bf235eb59baff1

Fixed

e7396baa09fa844e6ef2efaa91b6ad4cac706fd4

{
    "severity": "HIGH"
}

{
    "introduced_range": "22ea21dc9efff3e1ce539a098e4839975051bbe5:ca8a1dd2e9f38ae5d0ecae43be473d3a9af6a399"
}