OSV-2024-719
Heap-buffer-overflow in hevc_ref_pic_lists_modification
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70890
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
hevc_ref_pic_lists_modification
gf_hevc_parse_nalu_bs
gf_inspect_dump_nalu_internal
What each source reports
OSV No score
Heap-buffer-overflow in hevc_ref_pic_lists_modification
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70890
Crash type: Heap-buffer-overflow WRITE 4
Crash state:
hevc_ref_pic_lists_modification
gf_hevc_parse_nalu_bs
gf_inspect_dump_nalu_internal
- Record
OSV-2024-719- Updated
- 2026-11-06
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gpacOSS-Fuzz |
Listed versions, plus commit ranges testtag0.1abi-12abi-12.16abi-12.17abi-12.18 Show 45 moreShow lessabi-12.19abi-12.20abi-12.21abi-12.22abi-12.23abi-12.24abi-12.25abi-12.26abi-12.27abi-13abi-13.0abi-14abi-14.0abi-15abi-15.0abi-15.1abi-15.2abi-16abi-16.2abi-16.3abi-16.4abi-16.5v26.02.0abi-16.6abi-16.7abi-16.8abi-16.9abi-16.10abi-16.11abi-16.12abi-16.13abi-16.14abi-16.15abi-16.16abi-16.17abi-16.18abi-16.19abi-16.20abi-16.21abi-16.22v26.07.0abi-16.23abi-16.24abi-16.25abi-16.26 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2024-719 is a vulnerability with no CVSS score yet in gpac, published August 7, 2024. No source lists public exploit code. No source names a fixed version.
References
This page doesn't list everything
Left out here: 2 versions. The JSON record has them.