OSV-2021-1235
Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38387
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_fill_bs1_16x16mb_pslice
ih264d_compute_bs_non_mbaff_thread
ih264d_recon_deblk_slice
What each source reports
OSV No score
Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38387
Crash type: Heap-buffer-overflow READ 4
Crash state:
ih264d_fill_bs1_16x16mb_pslice
ih264d_compute_bs_non_mbaff_thread
ih264d_recon_deblk_slice
- Record
OSV-2021-1235- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libavcOSS-Fuzz |
Listed versions, plus commit ranges android-11.0.0_r18android-11.0.0_r19android-11.0.0_r20android-11.0.0_r21android-11.0.0_r22 Show 45 moreShow lessandroid-11.0.0_r23android-11.0.0_r24android-11.0.0_r26android-11.0.0_r27android-11.0.0_r28android-11.0.0_r29android-11.0.0_r38android-11.0.0_r39android-11.0.0_r40android-11.0.0_r43android-11.0.0_r46android-12.0.0_r1android-12.0.0_r10android-12.0.0_r11android-12.0.0_r12android-12.0.0_r13android-12.0.0_r14android-12.0.0_r15android-12.0.0_r16android-12.0.0_r2android-12.0.0_r3android-12.0.0_r4android-12.0.0_r5android-12.0.0_r6android-12.0.0_r7android-12.0.0_r8android-12.0.0_r9android-cts-12.0_r1android-mainline-11.0.0_r12android-mainline-11.0.0_r13android-mainline-11.0.0_r14android-mainline-11.0.0_r15android-mainline-11.0.0_r16android-mainline-11.0.0_r17android-mainline-11.0.0_r18android-mainline-11.0.0_r20android-mainline-11.0.0_r21android-mainline-11.0.0_r22android-mainline-11.0.0_r23android-mainline-11.0.0_r24android-mainline-11.0.0_r25android-mainline-11.0.0_r26android-mainline-11.0.0_r27android-mainline-11.0.0_r28android-mainline-11.0.0_r30 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2021-1235 is a vulnerability with no CVSS score yet in libavc, published September 12, 2021. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 102 versions. The JSON record has them.