osv-2021-1237
Vulnerability from osv_ossfuzz
Published
2021-09-12 00:00
Modified
2023-02-24 01:42
Summary
Heap-buffer-overflow in ih264d_parse_decode_slice
Details
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38482
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_parse_decode_slice
ih264d_parse_nal_unit
ih264d_video_decode
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"severity": "MEDIUM"
},
"package": {
"ecosystem": "OSS-Fuzz",
"name": "libavc"
},
"ranges": [
{
"events": [
{
"introduced": "75e53c541e779591bda8ca25217f5023f70369ab"
},
{
"introduced": "620e0296caaf83d276eefb8e217c09856d3be74d"
},
{
"introduced": "651b0ba1356bb1a47fdd9e86d21bfee71a662ff5"
},
{
"introduced": "a7029bb00c882e6d4a143b0d1a55b7fe3e6338b4"
},
{
"introduced": "a88e0683a420d7ee9aa4b6f41f94cb8dc0c5e040"
},
{
"introduced": "b70ba0edef21355a2459062e275936ae298a32c4"
},
{
"introduced": "f6473beaa92ca26e6f0fb1da1f0d19aa4a41b99d"
},
{
"introduced": "fa13b3087684ffefd82d61c34e61714881674cd3"
},
{
"fixed": "2191ac2b82618e4acf73e5247794f51eb01eabd3"
},
{
"fixed": "6a155ff191db9307e91897fc6096e5214a9be0f7"
},
{
"fixed": "23247c81421129686df32536ed9a15b0508acd39"
},
{
"fixed": "45ee63f03a91b91ca6e96ba359cdd92c13830f3c"
},
{
"fixed": "a20b83447dbefd90b21e109fb9d5fcc4d0b1e193"
},
{
"fixed": "dc110841d6a3fb2f9c9f1af04b3b71da40fbd392"
},
{
"fixed": "479c2eab082f4fd9a1aa384cf4e4db6ef6bd907f"
},
{
"fixed": "1f6d235f4ed135fe641712149129730aa2286179"
}
],
"repo": "https://android.googlesource.com/platform/external/libavc",
"type": "GIT"
}
],
"versions": [
"android-10.0.0_r12",
"android-10.0.0_r13",
"android-10.0.0_r14",
"android-10.0.0_r7",
"android-10.0.0_r8",
"android-10.0.0_r9",
"android-11.0.0_r1",
"android-11.0.0_r16",
"android-11.0.0_r17",
"android-11.0.0_r18",
"android-11.0.0_r19",
"android-11.0.0_r2",
"android-11.0.0_r20",
"android-11.0.0_r21",
"android-11.0.0_r22",
"android-11.0.0_r23",
"android-11.0.0_r24",
"android-11.0.0_r25",
"android-11.0.0_r26",
"android-11.0.0_r27",
"android-11.0.0_r28",
"android-11.0.0_r29",
"android-11.0.0_r3",
"android-11.0.0_r32",
"android-11.0.0_r33",
"android-11.0.0_r34",
"android-11.0.0_r35",
"android-11.0.0_r36",
"android-11.0.0_r37",
"android-11.0.0_r4",
"android-11.0.0_r43",
"android-11.0.0_r44",
"android-11.0.0_r45",
"android-11.0.0_r46",
"android-11.0.0_r47",
"android-11.0.0_r48",
"android-11.0.0_r5",
"android-12.0.0_r1",
"android-12.0.0_r10",
"android-12.0.0_r11",
"android-12.0.0_r12",
"android-12.0.0_r13",
"android-12.0.0_r14",
"android-12.0.0_r15",
"android-12.0.0_r16",
"android-12.0.0_r2",
"android-12.0.0_r3",
"android-12.0.0_r4",
"android-12.0.0_r5",
"android-12.0.0_r6",
"android-12.0.0_r7",
"android-12.0.0_r8",
"android-12.0.0_r9",
"android-9.0.0_r1",
"android-9.0.0_r10",
"android-9.0.0_r11",
"android-9.0.0_r12",
"android-9.0.0_r16",
"android-9.0.0_r17",
"android-9.0.0_r18",
"android-9.0.0_r19",
"android-9.0.0_r2",
"android-9.0.0_r20",
"android-9.0.0_r21",
"android-9.0.0_r22",
"android-9.0.0_r3",
"android-9.0.0_r30",
"android-9.0.0_r31",
"android-9.0.0_r32",
"android-9.0.0_r33",
"android-9.0.0_r34",
"android-9.0.0_r35",
"android-9.0.0_r36",
"android-9.0.0_r37",
"android-9.0.0_r40",
"android-9.0.0_r41",
"android-9.0.0_r42",
"android-9.0.0_r43",
"android-9.0.0_r44",
"android-9.0.0_r45",
"android-9.0.0_r47",
"android-9.0.0_r5",
"android-9.0.0_r6",
"android-9.0.0_r7",
"android-9.0.0_r8",
"android-9.0.0_r9",
"android-cts-11.0_r1",
"android-cts-11.0_r2",
"android-cts-11.0_r3",
"android-cts-11.0_r4",
"android-cts-11.0_r5",
"android-cts-11.0_r6",
"android-cts-12.0_r1",
"android-cts-12.0_r2",
"android-cts-9.0_r1",
"android-cts-9.0_r10",
"android-cts-9.0_r11",
"android-cts-9.0_r12",
"android-cts-9.0_r13",
"android-cts-9.0_r14",
"android-cts-9.0_r15",
"android-cts-9.0_r16",
"android-cts-9.0_r17",
"android-cts-9.0_r18",
"android-cts-9.0_r2",
"android-cts-9.0_r3",
"android-cts-9.0_r4",
"android-cts-9.0_r5",
"android-cts-9.0_r6",
"android-cts-9.0_r7",
"android-cts-9.0_r8",
"android-cts-9.0_r9",
"android-mainline-10.0.0_r11",
"android-mainline-10.0.0_r12",
"android-mainline-10.0.0_r13",
"android-mainline-10.0.0_r4",
"android-mainline-11.0.0_r12",
"android-mainline-11.0.0_r13",
"android-mainline-11.0.0_r14",
"android-mainline-11.0.0_r15",
"android-mainline-11.0.0_r16",
"android-mainline-11.0.0_r17",
"android-mainline-11.0.0_r18",
"android-mainline-11.0.0_r20",
"android-mainline-11.0.0_r21",
"android-mainline-11.0.0_r22",
"android-mainline-11.0.0_r23",
"android-mainline-11.0.0_r24",
"android-mainline-11.0.0_r25",
"android-mainline-11.0.0_r26",
"android-mainline-11.0.0_r27",
"android-mainline-11.0.0_r28",
"android-mainline-11.0.0_r30",
"android-mainline-11.0.0_r31",
"android-mainline-11.0.0_r32",
"android-mainline-11.0.0_r34",
"android-mainline-11.0.0_r35",
"android-mainline-11.0.0_r36",
"android-mainline-11.0.0_r37",
"android-mainline-11.0.0_r38",
"android-mainline-11.0.0_r39",
"android-mainline-11.0.0_r40",
"android-mainline-11.0.0_r41",
"android-mainline-11.0.0_r42",
"android-mainline-11.0.0_r43",
"android-mainline-11.0.0_r44",
"android-mainline-12.0.0_r1",
"android-mainline-12.0.0_r10",
"android-mainline-12.0.0_r11",
"android-mainline-12.0.0_r12",
"android-mainline-12.0.0_r13",
"android-mainline-12.0.0_r14",
"android-mainline-12.0.0_r15",
"android-mainline-12.0.0_r16",
"android-mainline-12.0.0_r17",
"android-mainline-12.0.0_r18",
"android-mainline-12.0.0_r19",
"android-mainline-12.0.0_r2",
"android-mainline-12.0.0_r20",
"android-mainline-12.0.0_r3",
"android-mainline-12.0.0_r4",
"android-mainline-12.0.0_r5",
"android-mainline-12.0.0_r6",
"android-mainline-12.0.0_r7",
"android-mainline-12.0.0_r8",
"android-mainline-12.0.0_r9",
"android-n-iot-release-ihome-igv1",
"android-n-iot-release-lg-thinq-wk7",
"android-n-iot-release-polk-at1",
"android-n-iot-release-smart-display",
"android-n-iot-release-smart-display-r2",
"android-o-mr1-iot-preview-6",
"android-o-mr1-iot-preview-7",
"android-o-mr1-iot-preview-8",
"android-o-mr1-iot-release-1.0.0",
"android-o-mr1-iot-release-1.0.1",
"android-o-mr1-iot-release-1.0.10",
"android-o-mr1-iot-release-1.0.12",
"android-o-mr1-iot-release-1.0.13",
"android-o-mr1-iot-release-1.0.14",
"android-o-mr1-iot-release-1.0.2",
"android-o-mr1-iot-release-1.0.3",
"android-o-mr1-iot-release-1.0.4",
"android-o-mr1-iot-release-1.0.5",
"android-o-mr1-iot-release-1.0.7",
"android-o-mr1-iot-release-1.0.8",
"android-o-mr1-iot-release-smart-clock-fcs",
"android-o-mr1-iot-release-smart-clock-fsi",
"android-o-mr1-iot-release-smart-clock-r2",
"android-o-mr1-iot-release-smart-clock-r6",
"android-o-mr1-iot-release-smart-display-r14",
"android-o-mr1-iot-release-smart-display-r22",
"android-o-mr1-iot-release-smart-display-r3",
"android-o-mr1-iot-release-smart-display-r30",
"android-o-mr1-iot-release-smart-display-r39",
"android-o-mr1-iot-release-smart-display-r4",
"android-o-mr1-iot-release-smart-display-r5",
"android-o-mr1-iot-release-smart-display-r8",
"android-o-mr1-iot-release-smart-display-r9",
"android-p-preview-1",
"android-p-preview-2",
"android-p-preview-3",
"android-p-preview-4",
"android-p-preview-5",
"android-platform-11.0.0_r1",
"android-platform-11.0.0_r10",
"android-platform-11.0.0_r11",
"android-platform-11.0.0_r12",
"android-platform-11.0.0_r13",
"android-platform-11.0.0_r2",
"android-platform-11.0.0_r3",
"android-platform-11.0.0_r4",
"android-platform-11.0.0_r5",
"android-platform-11.0.0_r6",
"android-platform-11.0.0_r7",
"android-platform-11.0.0_r8",
"android-platform-11.0.0_r9",
"android-platform-12.0.0_r1",
"android-platform-12.0.0_r2",
"android-q-preview-1",
"android-q-preview-2.5",
"android-q-preview-4",
"android-q-preview-5",
"android-q-preview-6",
"android-r-beta-2",
"android-r-beta-3",
"android-r-preview-1",
"android-r-preview-2",
"android-r-preview-3",
"android-r-preview-4",
"android-s-beta-1",
"android-s-beta-2",
"android-s-preview-1",
"android-s-v2-preview-1",
"android-security-10.0.0_r58",
"android-security-10.0.0_r59",
"android-security-10.0.0_r60",
"android-security-10.0.0_r61",
"android-security-11.0.0_r1",
"android-security-11.0.0_r49",
"android-security-11.0.0_r50",
"android-security-8.1.0_r92",
"android-security-8.1.0_r93",
"android-security-9.0.0_r72",
"android-security-9.0.0_r73",
"android-security-9.0.0_r74",
"android-security-9.0.0_r75",
"android-vts-11.0_r1",
"android-vts-11.0_r2",
"android-vts-11.0_r3",
"android-vts-11.0_r4",
"android-vts-11.0_r5",
"android-vts-12.0_r1",
"android-vts-9.0_r10",
"android-vts-9.0_r11",
"android-vts-9.0_r12",
"android-vts-9.0_r13",
"android-vts-9.0_r14",
"android-vts-9.0_r15",
"android-vts-9.0_r16",
"android-vts-9.0_r17",
"android-vts-9.0_r18",
"android-vts-9.0_r4",
"android-vts-9.0_r5",
"android-vts-9.0_r6",
"android-vts-9.0_r7",
"android-vts-9.0_r8",
"android-vts-9.0_r9",
"android-wear-8.0.0_r1",
"android-wear-8.0.0_r2",
"android-wear-9.0.0_r1",
"android-wear-9.0.0_r10",
"android-wear-9.0.0_r11",
"android-wear-9.0.0_r12",
"android-wear-9.0.0_r13",
"android-wear-9.0.0_r14",
"android-wear-9.0.0_r15",
"android-wear-9.0.0_r16",
"android-wear-9.0.0_r17",
"android-wear-9.0.0_r18",
"android-wear-9.0.0_r19",
"android-wear-9.0.0_r2",
"android-wear-9.0.0_r20",
"android-wear-9.0.0_r21",
"android-wear-9.0.0_r22",
"android-wear-9.0.0_r23",
"android-wear-9.0.0_r24",
"android-wear-9.0.0_r25",
"android-wear-9.0.0_r26",
"android-wear-9.0.0_r27",
"android-wear-9.0.0_r28",
"android-wear-9.0.0_r29",
"android-wear-9.0.0_r3",
"android-wear-9.0.0_r30",
"android-wear-9.0.0_r31",
"android-wear-9.0.0_r32",
"android-wear-9.0.0_r33",
"android-wear-9.0.0_r4",
"android-wear-9.0.0_r5",
"android-wear-9.0.0_r6",
"android-wear-9.0.0_r7",
"android-wear-9.0.0_r8",
"android-wear-9.0.0_r9",
"android-wear-p-preview-2",
"platform-tools-29.0.1",
"platform-tools-29.0.2",
"platform-tools-29.0.3",
"platform-tools-29.0.4",
"platform-tools-29.0.5",
"platform-tools-29.0.6",
"platform-tools-30.0.0",
"platform-tools-30.0.1",
"platform-tools-30.0.2",
"platform-tools-30.0.3",
"platform-tools-30.0.4",
"platform-tools-30.0.5",
"platform-tools-31.0.0",
"platform-tools-31.0.1",
"platform-tools-31.0.2",
"platform-tools-31.0.3",
"android-12.0.0_r18",
"android-12.0.0_r20",
"android-12.0.0_r19",
"android-12.0.0_r21",
"android-vts-11.0_r6",
"android-vts-12.0_r2",
"android-vts-9.0_r19",
"android-12.0.0_r25",
"android-12.0.0_r26",
"android-security-10.0.0_r62",
"android-security-11.0.0_r51",
"android-security-9.0.0_r76",
"android-o-mr1-iot-release-smart-display-r40.1J",
"android-platform-11.0.0_r14",
"android-platform-12.0.0_r3",
"android-s-v2-preview-2",
"android-s-v2-beta-2",
"android-12.0.0_r27",
"android-mainline-12.0.0_r21",
"android-mainline-12.0.0_r23",
"android-mainline-12.0.0_r25",
"android-mainline-12.0.0_r26",
"android-mainline-12.0.0_r27",
"android-mainline-12.0.0_r31",
"android-mainline-12.0.0_r33",
"android-mainline-12.0.0_r36",
"android-mainline-12.0.0_r37",
"android-mainline-12.0.0_r39",
"android-12.0.0_r28",
"android-12.0.0_r29",
"android-12.0.0_r30",
"android-12.0.0_r31",
"android-security-10.0.0_r63",
"android-security-11.0.0_r52",
"android-cts-11.0_r7",
"android-cts-12.0_r3",
"android-cts-9.0_r19",
"android-mainline-12.0.0_r22",
"android-mainline-12.0.0_r24",
"android-mainline-12.0.0_r28",
"android-mainline-12.0.0_r29",
"android-mainline-12.0.0_r30",
"android-mainline-12.0.0_r34",
"android-mainline-12.0.0_r35",
"android-mainline-12.0.0_r38",
"android-mainline-12.0.0_r40",
"android-mainline-12.0.0_r41",
"android-mainline-12.0.0_r42",
"android-mainline-12.0.0_r43",
"android-mainline-12.0.0_r44",
"android-mainline-12.0.0_r45",
"android-mainline-12.0.0_r46",
"android-mainline-12.0.0_r47",
"android-mainline-12.0.0_r48",
"android-mainline-12.0.0_r49",
"android-mainline-12.0.0_r50",
"android-mainline-12.0.0_r51",
"android-mainline-12.0.0_r52",
"android-mainline-12.0.0_r53",
"android-mainline-12.0.0_r54",
"android-mainline-12.0.0_r56",
"android-mainline-12.0.0_r57",
"android-mainline-12.0.0_r58",
"android-vts-11.0_r7",
"android-vts-12.0_r3",
"android-wear-9.0.0_r34",
"aml_doc_310851020",
"android-12.0.0_r33",
"android-12.0.0_r34",
"android-cts-11.0_r10",
"android-cts-11.0_r11",
"android-cts-11.0_r8",
"android-cts-11.0_r9",
"android-cts-12.0_r4",
"android-cts-12.0_r5",
"android-cts-12.0_r6",
"android-cts-12.0_r7",
"android-cts-9.0_r20",
"android-mainline-12.0.0_r111",
"android-vts-11.0_r10",
"android-vts-11.0_r11",
"android-vts-11.0_r8",
"android-vts-11.0_r9",
"android-vts-12.0_r4",
"android-vts-12.0_r5",
"android-vts-12.0_r6",
"android-vts-12.0_r7",
"q_tzdata_aml_294400310"
]
}
],
"details": "OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38482\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nih264d_parse_decode_slice\nih264d_parse_nal_unit\nih264d_video_decode\n```\n",
"id": "OSV-2021-1237",
"modified": "2023-02-24T01:42:22.584425Z",
"published": "2021-09-12T00:00:40.701615Z",
"references": [
{
"type": "REPORT",
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38482"
}
],
"summary": "Heap-buffer-overflow in ih264d_parse_decode_slice"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…