{"id":"OSV-2026-889","summary":"Use-of-uninitialized-value in vp8_compute_skin_block","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=520701729\n\n```\nCrash type: Use-of-uninitialized-value\nCrash state:\nvp8_compute_skin_block\nencode_frame_to_data_rate\nvp8_get_compressed_data\n```\n","modified":"2026-06-08T00:20:52.435472Z","published":"2026-06-08T00:20:52.435198Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=520701729"}],"affected":[{"package":{"name":"libvpx","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libvpx"},"ranges":[{"type":"GIT","repo":"https://chromium.googlesource.com/webm/libvpx","events":[{"introduced":"49dd8ff38aaf06024cfea9d3e74d33592cc443a2"},{"fixed":"9794f877a3e380ecd57b735b81fe94ab368f6748"}]}],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"908e88c1aa6a12a86feb5d36a919c219c42f1e2c:f662898c395f824058c997885c66c2c4c5e6e69c","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libvpx/OSV-2026-889.yaml"}}],"schema_version":"1.7.5"}