OSV-2021-1559
Heap-buffer-overflow in ih264d_mark_err_slice_skip
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40851
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
ih264d_mark_err_slice_skip
ih264d_video_decode
ih264d_api_function
What each source reports
OSV No score
Heap-buffer-overflow in ih264d_mark_err_slice_skip
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40851
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
ih264d_mark_err_slice_skip
ih264d_video_decode
ih264d_api_function
- Record
OSV-2021-1559- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libavcOSS-Fuzz |
Listed versions, plus commit ranges android-11.0.0_r18android-11.0.0_r19android-11.0.0_r20android-11.0.0_r21android-11.0.0_r22 Show 45 moreShow lessandroid-11.0.0_r23android-11.0.0_r24android-11.0.0_r26android-11.0.0_r27android-11.0.0_r28android-11.0.0_r29android-11.0.0_r38android-11.0.0_r39android-11.0.0_r40android-11.0.0_r43android-11.0.0_r46android-12.0.0_r1android-12.0.0_r10android-12.0.0_r11android-12.0.0_r12android-12.0.0_r13android-12.0.0_r14android-12.0.0_r15android-12.0.0_r16android-12.0.0_r18android-12.0.0_r19android-12.0.0_r2android-12.0.0_r20android-12.0.0_r21android-12.0.0_r25android-12.0.0_r26android-12.0.0_r27android-12.0.0_r28android-12.0.0_r29android-12.0.0_r3android-12.0.0_r30android-12.0.0_r31android-12.0.0_r4android-12.0.0_r5android-12.0.0_r6android-12.0.0_r7android-12.0.0_r8android-12.0.0_r9android-cts-12.0_r1android-cts-12.0_r2android-mainline-11.0.0_r12android-mainline-11.0.0_r13android-mainline-11.0.0_r14android-mainline-11.0.0_r15android-mainline-11.0.0_r16 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2021-1559 is a vulnerability with no CVSS score yet in libavc, published November 10, 2021. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 123 versions. The JSON record has them.