{"id":"OSV-2020-2308","summary":"Heap-buffer-overflow in derive_collocated_motion_vectors","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30568\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nderive_collocated_motion_vectors\nderive_temporal_luma_vector_prediction\nfill_luma_motion_vector_predictors\n```\n","modified":"2026-09-19T14:09:21.388740Z","published":"2021-02-10T00:00:17.357392Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30568"}],"affected":[{"package":{"name":"libheif","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libheif"},"ranges":[{"type":"GIT","repo":"https://github.com/strukturag/libheif.git","events":[{"introduced":"2490273566a1690d7ca28f7bd30fd3ac0977796f"}]}],"versions":["v1.10.0","v1.11.0","v1.12.0","v1.8.0","v1.9.0","v1.9.1","v1.13.0","v1.14.0","v1.14.1","v1.14.2","v1.15.0","v1.15.1","v1.15.2","v1.16.0","v1.16.1","v1.16.2","v1.17.0","v1.17.1","v1.17.2","v1.17.3","v1.17.4","v1.17.5","v1.17.6","v1.18.0-rc1","v1.18.0","v1.18.1","v1.18.2","v1.19.0","v1.19.1","v1.19.2","v1.19.3","v1.19.4","v1.19.5","v1.19.6","v1.19.7","v1.19.8","v1.20.0","v1.20.1","v1.20.2","v1.21.0","v1.21.1","v1.21.2","v1.22.0","v1.22.1","v1.22.2","v1.23.0","v1.23.1","v1.23.2","v1.23.3","v1.23.4"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libheif/OSV-2020-2308.yaml"}}],"schema_version":"1.9.0"}