OSV-2021-380
Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30801
Crash type: Heap-buffer-overflow READ 8
Crash state:
ih264d_fill_bs1_16x16mb_pslice
ih264d_compute_bs_non_mbaff_thread
ih264d_recon_deblk_slice
What each source reports
OSV No score
Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30801
Crash type: Heap-buffer-overflow READ 8
Crash state:
ih264d_fill_bs1_16x16mb_pslice
ih264d_compute_bs_non_mbaff_thread
ih264d_recon_deblk_slice
- Record
OSV-2021-380- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libavcOSS-Fuzz |
Listed versions, plus commit ranges android-s-beta-1android-s-preview-1platform-tools-31.0.0platform-tools-31.0.1platform-tools-31.0.2 Show 45 moreShow lessandroid-s-beta-2android-11.0.0_r18android-11.0.0_r19android-11.0.0_r20android-11.0.0_r21android-11.0.0_r22android-11.0.0_r23android-11.0.0_r24android-11.0.0_r26android-11.0.0_r27android-11.0.0_r28android-11.0.0_r29android-11.0.0_r38platform-tools-29.0.1platform-tools-29.0.2platform-tools-29.0.3platform-tools-29.0.4platform-tools-29.0.5platform-tools-29.0.6platform-tools-30.0.0platform-tools-30.0.1platform-tools-30.0.2platform-tools-30.0.3platform-tools-30.0.4platform-tools-30.0.5android-11.0.0_r39android-s-beta-3android-11.0.0_r40android-s-beta-4android-s-beta-5android-11.0.0_r43platform-tools-31.0.3android-12.0.0_r1android-12.0.0_r2android-cts-12.0_r1android-mainline-11.0.0_r15android-mainline-11.0.0_r23android-mainline-11.0.0_r35android-mainline-11.0.0_r44android-vts-12.0_r1android-11.0.0_r46android-12.0.0_r3android-s-v2-preview-1android-12.0.0_r4android-12.0.0_r5 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2021-380 is a vulnerability with no CVSS score yet in libavc, published February 12, 2021. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 11 versions. The JSON record has them.