OSV-2026-1039

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libxaac/OSV-2026-1039.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1039
Published
2026-07-07T00:05:37Z
Modified
2026-07-07T00:05:37Z
Summary
Index-out-of-bounds in iusace_estimate_scfs_chan
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531479957

Crash type: Index-out-of-bounds
Crash state:
iusace_estimate_scfs_chan
iusace_quantize_spec
iusace_fd_encode
References

Affected packages

OSS-Fuzz / libxaac

Package

Name
libxaac
Purl
pkg:generic/libxaac

Affected ranges

Type
GIT
Repo
https://github.com/ittiam-systems/libxaac.git
Events
Introduced
60cae125cf9b02ad4bf81ef2b332be1bee09ea9f
Fixed
6c771f2ccdef83ebc6dbf7694b1a0ce9c0585d46

Affected versions

v0.*
v0.1.13

Ecosystem specific 

{
    "severity":  "MEDIUM"
}

Database specific

fixed_range 
"39f510f4166d24cfa4bf879f212b1fca1926264f:6c771f2ccdef83ebc6dbf7694b1a0ce9c0585d46"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libxaac/OSV-2026-1039.yaml"