OSV-2020-674
Heap-buffer-overflow in ihevcd_mv_merge
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17196
Crash type: Heap-buffer-overflow READ 4
Crash state:
ihevcd_mv_merge
ihevcd_get_mv_ctb
ihevcd_parse_slice_data
What each source reports
OSVNo score
Heap-buffer-overflow in ihevcd_mv_merge
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17196
Crash type: Heap-buffer-overflow READ 4
Crash state:
ihevcd_mv_merge
ihevcd_get_mv_ctb
ihevcd_parse_slice_data
- Record
OSV-2020-674- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libhevcOSS-Fuzz | Listed versions, plus commit ranges android-mainline-10.0.0_r11android-mainline-10.0.0_r6android-mainline-10.0.0_r8platform-tools-29.0.5android-10.0.0_r12 Show 24 moreShow lessandroid-10.0.0_r13android-10.0.0_r14android-10.0.0_r30android-10.0.0_r31android-10.0.0_r32android-10.0.0_r33android-10.0.0_r34android-10.0.0_r35android-10.0.0_r36android-10.0.0_r7android-10.0.0_r8android-10.0.0_r9android-mainline-10.0.0_r10android-mainline-10.0.0_r12android-mainline-10.0.0_r13android-mainline-10.0.0_r5android-mainline-10.0.0_r7android-mainline-10.0.0_r9android-mainline-12.0.0_r54android-mainline-12.0.0_r111q_tzdata_aml_294400310q_tzdata_aml_295500001q_tzdata_aml_295500002q_tzdata_aml_295600110 | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2020-674 is a vulnerability with no CVSS score yet in libhevc, published July 1, 2020. No source lists public exploit code. A source reports a fix.