Every CVE Search/ Get API key

OSV-2020-1161

Heap-buffer-overflow in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16604

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
impeg2_fmt_conv_yuv420p_to_yuv420sp_uv
impeg2d_format_convert
impeg2d_dec_pic_data_thread

What each source reports

OSV No score

Heap-buffer-overflow in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16604

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
impeg2_fmt_conv_yuv420p_to_yuv420sp_uv
impeg2d_format_convert
impeg2d_dec_pic_data_thread
Record
OSV-2020-1161
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
libmpeg2
OSS-Fuzz
Listed versions, plus commit ranges
android-mainline-10.0.0_r6android-mainline-10.0.0_r8android-r-preview-1android-r-preview-2android-r-preview-3
Show 29 moreShow less
android-r-preview-4platform-tools-29.0.5platform-tools-29.0.6platform-tools-30.0.0platform-tools-30.0.1platform-tools-30.0.2platform-tools-30.0.3android-10.0.0_r12android-10.0.0_r13android-10.0.0_r14android-10.0.0_r30android-10.0.0_r31android-10.0.0_r32android-10.0.0_r33android-10.0.0_r34android-10.0.0_r35android-10.0.0_r36android-10.0.0_r42android-10.0.0_r43android-10.0.0_r44android-10.0.0_r45android-10.0.0_r7android-10.0.0_r8android-10.0.0_r9android-mainline-10.0.0_r10android-mainline-10.0.0_r4android-mainline-10.0.0_r5android-mainline-10.0.0_r7android-mainline-10.0.0_r9
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2020-1161 is a vulnerability with no CVSS score yet in libmpeg2, published July 22, 2020. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open