{"id":"OSV-2024-659","summary":"Index-out-of-bounds in gf_vvc_parse_nalu_bs","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392\n\n```\nCrash type: Index-out-of-bounds\nCrash state:\ngf_vvc_parse_nalu_bs\ngf_inspect_dump_nalu_internal\ninspect_process\n```\n","modified":"2026-04-11T14:19:01.678469Z","published":"2024-07-18T00:01:18.765548Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392"}],"affected":[{"package":{"name":"gpac","ecosystem":"OSS-Fuzz","purl":"pkg:generic/gpac"},"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"99a7952e91938f8c0d16f2235b912de1fed6c1f8"}]}],"versions":["testtag0.1","abi-12","abi-12.16","abi-12.17","abi-12.18","abi-12.19","abi-12.20","abi-12.21","abi-12.22","abi-12.23","abi-12.24","abi-12.25","abi-12.26","abi-12.27","abi-13","abi-13.0","abi-14","abi-14.0","abi-15","abi-15.0","abi-15.1","abi-15.2","abi-16","abi-16.2","abi-16.3","abi-16.4","abi-16.5","v26.02.0","abi-16.6","abi-16.7"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"df8121066cf8fb25cc70adf7ca8b35bda82fe216:a012d226ec8de965159f8477e8929bb5d2f57c31","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpac/OSV-2024-659.yaml"}}],"schema_version":"1.7.5"}