{"id":"OSV-2020-1066","summary":"Heap-buffer-overflow in dav1dFeedData","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21947\n\n```\nCrash type: Heap-buffer-overflow READ {*}\nCrash state:\ndav1dFeedData\ndav1dCodecGetNextImage\navifDecoderNextImage\n```\n","modified":"2022-04-13T03:34:31.037013Z","published":"2020-07-22T21:49:44.588962Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21947"}],"affected":[{"package":{"name":"libavif","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libavif"},"ranges":[{"type":"GIT","repo":"https://github.com/AOMediaCodec/libavif.git","events":[{"introduced":"4be7ce1dd3f0a45cd2555c94bd76a8f40baabcc4"},{"fixed":"34c0d3147f3d30e1218bceda410c978481a5e1be"},{"fixed":"f0a91c6e28fb3e230fef99e42ba440b7d57711c1"}]}],"versions":["v0.5.5","v0.5.6","v0.5.7","v0.6.0","v0.6.1","v0.6.2","v0.6.3","v0.6.4","v0.7.0","v0.7.1","v0.7.2"],"ecosystem_specific":{"introduced_range":"unknown:4be7ce1dd3f0a45cd2555c94bd76a8f40baabcc4","severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libavif/OSV-2020-1066.yaml","fixed_range":"a7d479eccdf4728f7209dbdcd6ada8ecaca64b4f:f0a91c6e28fb3e230fef99e42ba440b7d57711c1"}}],"schema_version":"1.7.3"}