OSV-2026-141

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/mpv/OSV-2026-141.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-141
Published
2026-01-26T00:03:47.552290Z
Modified
2026-01-26T00:03:47.552807Z
Summary
Segv on unknown address in yuv2rgb4_X_c
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478212631

Crash type: Segv on unknown address
Crash state:
yuv2rgb4_X_c
packed_vscale
ff_swscale
References

Affected packages

OSS-Fuzz / mpv

Package

Name
mpv
Purl
pkg:generic/mpv

Affected ranges

Type
GIT
Repo
https://github.com/mpv-player/mpv
Events
Introduced
cc1e654286b9bbca2cd5428d658874205624723e
Fixed
d1743b641b5b8a51115a9828124c7a9b527115e3

Ecosystem specific 

{
    "severity": null
}

Database specific

introduced_range 
"32a164cc017acab50389f2194f720ccfd0b01a28:731450f883f24bfa0e3441c205477f1c8d85f1ee"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/mpv/OSV-2026-141.yaml"
fixed_range 
"7bfa2cfd3d44d38d1736d66cc26e30c587e17636:d1743b641b5b8a51115a9828124c7a9b527115e3"