{"id":"OSV-2021-1237","summary":"Heap-buffer-overflow in ih264d_parse_decode_slice","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38482\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nih264d_parse_decode_slice\nih264d_parse_nal_unit\nih264d_video_decode\n```\n","modified":"2023-02-24T01:42:22.584425Z","published":"2021-09-12T00:00:40.701615Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38482"}],"affected":[{"package":{"name":"libavc","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libavc"},"ranges":[{"type":"GIT","repo":"https://android.googlesource.com/platform/external/libavc","events":[{"introduced":"75e53c541e779591bda8ca25217f5023f70369ab"},{"introduced":"620e0296caaf83d276eefb8e217c09856d3be74d"},{"introduced":"651b0ba1356bb1a47fdd9e86d21bfee71a662ff5"},{"introduced":"a7029bb00c882e6d4a143b0d1a55b7fe3e6338b4"},{"introduced":"a88e0683a420d7ee9aa4b6f41f94cb8dc0c5e040"},{"introduced":"b70ba0edef21355a2459062e275936ae298a32c4"},{"introduced":"f6473beaa92ca26e6f0fb1da1f0d19aa4a41b99d"},{"introduced":"fa13b3087684ffefd82d61c34e61714881674cd3"},{"fixed":"2191ac2b82618e4acf73e5247794f51eb01eabd3"},{"fixed":"6a155ff191db9307e91897fc6096e5214a9be0f7"},{"fixed":"23247c81421129686df32536ed9a15b0508acd39"},{"fixed":"45ee63f03a91b91ca6e96ba359cdd92c13830f3c"},{"fixed":"a20b83447dbefd90b21e109fb9d5fcc4d0b1e193"},{"fixed":"dc110841d6a3fb2f9c9f1af04b3b71da40fbd392"},{"fixed":"479c2eab082f4fd9a1aa384cf4e4db6ef6bd907f"},{"fixed":"1f6d235f4ed135fe641712149129730aa2286179"}]}],"versions":["android-10.0.0_r12","android-10.0.0_r13","android-10.0.0_r14","android-10.0.0_r7","android-10.0.0_r8","android-10.0.0_r9","android-11.0.0_r1","android-11.0.0_r16","android-11.0.0_r17","android-11.0.0_r18","android-11.0.0_r19","android-11.0.0_r2","android-11.0.0_r20","android-11.0.0_r21","android-11.0.0_r22","android-11.0.0_r23","android-11.0.0_r24","android-11.0.0_r25","android-11.0.0_r26","android-11.0.0_r27","android-11.0.0_r28","android-11.0.0_r29","android-11.0.0_r3","android-11.0.0_r32","android-11.0.0_r33","android-11.0.0_r34","android-11.0.0_r35","android-11.0.0_r36","android-11.0.0_r37","android-11.0.0_r4","android-11.0.0_r43","android-11.0.0_r44","android-11.0.0_r45","android-11.0.0_r46","android-11.0.0_r47","android-11.0.0_r48","android-11.0.0_r5","android-12.0.0_r1","android-12.0.0_r10","android-12.0.0_r11","android-12.0.0_r12","android-12.0.0_r13","android-12.0.0_r14","android-12.0.0_r15","android-12.0.0_r16","android-12.0.0_r2","android-12.0.0_r3","android-12.0.0_r4","android-12.0.0_r5","android-12.0.0_r6","android-12.0.0_r7","android-12.0.0_r8","android-12.0.0_r9","android-9.0.0_r1","android-9.0.0_r10","android-9.0.0_r11","android-9.0.0_r12","android-9.0.0_r16","android-9.0.0_r17","android-9.0.0_r18","android-9.0.0_r19","android-9.0.0_r2","android-9.0.0_r20","android-9.0.0_r21","android-9.0.0_r22","android-9.0.0_r3","android-9.0.0_r30","android-9.0.0_r31","android-9.0.0_r32","android-9.0.0_r33","android-9.0.0_r34","android-9.0.0_r35","android-9.0.0_r36","android-9.0.0_r37","android-9.0.0_r40","android-9.0.0_r41","android-9.0.0_r42","android-9.0.0_r43","android-9.0.0_r44","android-9.0.0_r45","android-9.0.0_r47","android-9.0.0_r5","android-9.0.0_r6","android-9.0.0_r7","android-9.0.0_r8","android-9.0.0_r9","android-cts-11.0_r1","android-cts-11.0_r2","android-cts-11.0_r3","android-cts-11.0_r4","android-cts-11.0_r5","android-cts-11.0_r6","android-cts-12.0_r1","android-cts-12.0_r2","android-cts-9.0_r1","android-cts-9.0_r10","android-cts-9.0_r11","android-cts-9.0_r12","android-cts-9.0_r13","android-cts-9.0_r14","android-cts-9.0_r15","android-cts-9.0_r16","android-cts-9.0_r17","android-cts-9.0_r18","android-cts-9.0_r2","android-cts-9.0_r3","android-cts-9.0_r4","android-cts-9.0_r5","android-cts-9.0_r6","android-cts-9.0_r7","android-cts-9.0_r8","android-cts-9.0_r9","android-mainline-10.0.0_r11","android-mainline-10.0.0_r12","android-mainline-10.0.0_r13","android-mainline-10.0.0_r4","android-mainline-11.0.0_r12","android-mainline-11.0.0_r13","android-mainline-11.0.0_r14","android-mainline-11.0.0_r15","android-mainline-11.0.0_r16","android-mainline-11.0.0_r17","android-mainline-11.0.0_r18","android-mainline-11.0.0_r20","android-mainline-11.0.0_r21","android-mainline-11.0.0_r22","android-mainline-11.0.0_r23","android-mainline-11.0.0_r24","android-mainline-11.0.0_r25","android-mainline-11.0.0_r26","android-mainline-11.0.0_r27","android-mainline-11.0.0_r28","android-mainline-11.0.0_r30","android-mainline-11.0.0_r31","android-mainline-11.0.0_r32","android-mainline-11.0.0_r34","android-mainline-11.0.0_r35","android-mainline-11.0.0_r36","android-mainline-11.0.0_r37","android-mainline-11.0.0_r38","android-mainline-11.0.0_r39","android-mainline-11.0.0_r40","android-mainline-11.0.0_r41","android-mainline-11.0.0_r42","android-mainline-11.0.0_r43","android-mainline-11.0.0_r44","android-mainline-12.0.0_r1","android-mainline-12.0.0_r10","android-mainline-12.0.0_r11","android-mainline-12.0.0_r12","android-mainline-12.0.0_r13","android-mainline-12.0.0_r14","android-mainline-12.0.0_r15","android-mainline-12.0.0_r16","android-mainline-12.0.0_r17","android-mainline-12.0.0_r18","android-mainline-12.0.0_r19","android-mainline-12.0.0_r2","android-mainline-12.0.0_r20","android-mainline-12.0.0_r3","android-mainline-12.0.0_r4","android-mainline-12.0.0_r5","android-mainline-12.0.0_r6","android-mainline-12.0.0_r7","android-mainline-12.0.0_r8","android-mainline-12.0.0_r9","android-n-iot-release-ihome-igv1","android-n-iot-release-lg-thinq-wk7","android-n-iot-release-polk-at1","android-n-iot-release-smart-display","android-n-iot-release-smart-display-r2","android-o-mr1-iot-preview-6","android-o-mr1-iot-preview-7","android-o-mr1-iot-preview-8","android-o-mr1-iot-release-1.0.0","android-o-mr1-iot-release-1.0.1","android-o-mr1-iot-release-1.0.10","android-o-mr1-iot-release-1.0.12","android-o-mr1-iot-release-1.0.13","android-o-mr1-iot-release-1.0.14","android-o-mr1-iot-release-1.0.2","android-o-mr1-iot-release-1.0.3","android-o-mr1-iot-release-1.0.4","android-o-mr1-iot-release-1.0.5","android-o-mr1-iot-release-1.0.7","android-o-mr1-iot-release-1.0.8","android-o-mr1-iot-release-smart-clock-fcs","android-o-mr1-iot-release-smart-clock-fsi","android-o-mr1-iot-release-smart-clock-r2","android-o-mr1-iot-release-smart-clock-r6","android-o-mr1-iot-release-smart-display-r14","android-o-mr1-iot-release-smart-display-r22","android-o-mr1-iot-release-smart-display-r3","android-o-mr1-iot-release-smart-display-r30","android-o-mr1-iot-release-smart-display-r39","android-o-mr1-iot-release-smart-display-r4","android-o-mr1-iot-release-smart-display-r5","android-o-mr1-iot-release-smart-display-r8","android-o-mr1-iot-release-smart-display-r9","android-p-preview-1","android-p-preview-2","android-p-preview-3","android-p-preview-4","android-p-preview-5","android-platform-11.0.0_r1","android-platform-11.0.0_r10","android-platform-11.0.0_r11","android-platform-11.0.0_r12","android-platform-11.0.0_r13","android-platform-11.0.0_r2","android-platform-11.0.0_r3","android-platform-11.0.0_r4","android-platform-11.0.0_r5","android-platform-11.0.0_r6","android-platform-11.0.0_r7","android-platform-11.0.0_r8","android-platform-11.0.0_r9","android-platform-12.0.0_r1","android-platform-12.0.0_r2","android-q-preview-1","android-q-preview-2.5","android-q-preview-4","android-q-preview-5","android-q-preview-6","android-r-beta-2","android-r-beta-3","android-r-preview-1","android-r-preview-2","android-r-preview-3","android-r-preview-4","android-s-beta-1","android-s-beta-2","android-s-preview-1","android-s-v2-preview-1","android-security-10.0.0_r58","android-security-10.0.0_r59","android-security-10.0.0_r60","android-security-10.0.0_r61","android-security-11.0.0_r1","android-security-11.0.0_r49","android-security-11.0.0_r50","android-security-8.1.0_r92","android-security-8.1.0_r93","android-security-9.0.0_r72","android-security-9.0.0_r73","android-security-9.0.0_r74","android-security-9.0.0_r75","android-vts-11.0_r1","android-vts-11.0_r2","android-vts-11.0_r3","android-vts-11.0_r4","android-vts-11.0_r5","android-vts-12.0_r1","android-vts-9.0_r10","android-vts-9.0_r11","android-vts-9.0_r12","android-vts-9.0_r13","android-vts-9.0_r14","android-vts-9.0_r15","android-vts-9.0_r16","android-vts-9.0_r17","android-vts-9.0_r18","android-vts-9.0_r4","android-vts-9.0_r5","android-vts-9.0_r6","android-vts-9.0_r7","android-vts-9.0_r8","android-vts-9.0_r9","android-wear-8.0.0_r1","android-wear-8.0.0_r2","android-wear-9.0.0_r1","android-wear-9.0.0_r10","android-wear-9.0.0_r11","android-wear-9.0.0_r12","android-wear-9.0.0_r13","android-wear-9.0.0_r14","android-wear-9.0.0_r15","android-wear-9.0.0_r16","android-wear-9.0.0_r17","android-wear-9.0.0_r18","android-wear-9.0.0_r19","android-wear-9.0.0_r2","android-wear-9.0.0_r20","android-wear-9.0.0_r21","android-wear-9.0.0_r22","android-wear-9.0.0_r23","android-wear-9.0.0_r24","android-wear-9.0.0_r25","android-wear-9.0.0_r26","android-wear-9.0.0_r27","android-wear-9.0.0_r28","android-wear-9.0.0_r29","android-wear-9.0.0_r3","android-wear-9.0.0_r30","android-wear-9.0.0_r31","android-wear-9.0.0_r32","android-wear-9.0.0_r33","android-wear-9.0.0_r4","android-wear-9.0.0_r5","android-wear-9.0.0_r6","android-wear-9.0.0_r7","android-wear-9.0.0_r8","android-wear-9.0.0_r9","android-wear-p-preview-2","platform-tools-29.0.1","platform-tools-29.0.2","platform-tools-29.0.3","platform-tools-29.0.4","platform-tools-29.0.5","platform-tools-29.0.6","platform-tools-30.0.0","platform-tools-30.0.1","platform-tools-30.0.2","platform-tools-30.0.3","platform-tools-30.0.4","platform-tools-30.0.5","platform-tools-31.0.0","platform-tools-31.0.1","platform-tools-31.0.2","platform-tools-31.0.3","android-12.0.0_r18","android-12.0.0_r20","android-12.0.0_r19","android-12.0.0_r21","android-vts-11.0_r6","android-vts-12.0_r2","android-vts-9.0_r19","android-12.0.0_r25","android-12.0.0_r26","android-security-10.0.0_r62","android-security-11.0.0_r51","android-security-9.0.0_r76","android-o-mr1-iot-release-smart-display-r40.1J","android-platform-11.0.0_r14","android-platform-12.0.0_r3","android-s-v2-preview-2","android-s-v2-beta-2","android-12.0.0_r27","android-mainline-12.0.0_r21","android-mainline-12.0.0_r23","android-mainline-12.0.0_r25","android-mainline-12.0.0_r26","android-mainline-12.0.0_r27","android-mainline-12.0.0_r31","android-mainline-12.0.0_r33","android-mainline-12.0.0_r36","android-mainline-12.0.0_r37","android-mainline-12.0.0_r39","android-12.0.0_r28","android-12.0.0_r29","android-12.0.0_r30","android-12.0.0_r31","android-security-10.0.0_r63","android-security-11.0.0_r52","android-cts-11.0_r7","android-cts-12.0_r3","android-cts-9.0_r19","android-mainline-12.0.0_r22","android-mainline-12.0.0_r24","android-mainline-12.0.0_r28","android-mainline-12.0.0_r29","android-mainline-12.0.0_r30","android-mainline-12.0.0_r34","android-mainline-12.0.0_r35","android-mainline-12.0.0_r38","android-mainline-12.0.0_r40","android-mainline-12.0.0_r41","android-mainline-12.0.0_r42","android-mainline-12.0.0_r43","android-mainline-12.0.0_r44","android-mainline-12.0.0_r45","android-mainline-12.0.0_r46","android-mainline-12.0.0_r47","android-mainline-12.0.0_r48","android-mainline-12.0.0_r49","android-mainline-12.0.0_r50","android-mainline-12.0.0_r51","android-mainline-12.0.0_r52","android-mainline-12.0.0_r53","android-mainline-12.0.0_r54","android-mainline-12.0.0_r56","android-mainline-12.0.0_r57","android-mainline-12.0.0_r58","android-vts-11.0_r7","android-vts-12.0_r3","android-wear-9.0.0_r34","aml_doc_310851020","android-12.0.0_r33","android-12.0.0_r34","android-cts-11.0_r10","android-cts-11.0_r11","android-cts-11.0_r8","android-cts-11.0_r9","android-cts-12.0_r4","android-cts-12.0_r5","android-cts-12.0_r6","android-cts-12.0_r7","android-cts-9.0_r20","android-mainline-12.0.0_r111","android-vts-11.0_r10","android-vts-11.0_r11","android-vts-11.0_r8","android-vts-11.0_r9","android-vts-12.0_r4","android-vts-12.0_r5","android-vts-12.0_r6","android-vts-12.0_r7","q_tzdata_aml_294400310"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libavc/OSV-2021-1237.yaml"}}],"schema_version":"1.7.3"}