OSV-2026-1294

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libaom/OSV-2026-1294.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1294
Published
2026-09-17T00:05:32Z
Modified
2026-09-17T00:05:32Z
Summary
UNKNOWN WRITE in av1_cdef_mse_calc_frame_mt
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562150738

Crash type: UNKNOWN WRITE
Crash state:
av1_cdef_mse_calc_frame_mt
av1_cdef_search
encode_with_recode_loop_and_filter
References

Affected packages

OSS-Fuzz / libaom

Package

Name
libaom
Purl
pkg:generic/libaom

Affected ranges

Type
GIT
Repo
https://aomedia.googlesource.com/aom
Events
Introduced
532ba44931cc110121e0a1a410412f3ab70e2200
Fixed
822f287f60cc99775d0293baa8f20dd8af88f2c4

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"037ca0e8863b171cc284390c7f1a845a6b2d7f4f:822f287f60cc99775d0293baa8f20dd8af88f2c4"
introduced_range 
"023743a7d78d9c7d33390c5c45b35495ea013a21:037ca0e8863b171cc284390c7f1a845a6b2d7f4f"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libaom/OSV-2026-1294.yaml"