{"id":"OSV-2020-1066","aliases":[],"status":"published","title":"Heap-buffer-overflow in dav1dFeedData","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21947\n\n```\nCrash type: Heap-buffer-overflow READ {*}\nCrash state:\ndav1dFeedData\ndav1dCodecGetNextImage\navifDecoderNextImage\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2020-07-22T21:49:44.588962Z","modified":"2022-04-13T03:34:31Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"libavif","ranges":[{"type":"GIT","events":[{"introduced":"4be7ce1dd3f0a45cd2555c94bd76a8f40baabcc4"},{"fixed":"34c0d3147f3d30e1218bceda410c978481a5e1be"},{"fixed":"f0a91c6e28fb3e230fef99e42ba440b7d57711c1"}]}],"versions":["v0.5.5","v0.5.6","v0.5.7","v0.6.0","v0.6.1","v0.6.2","v0.6.3","v0.6.4","v0.7.0","v0.7.1","v0.7.2"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21947","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2020-1066","title":"Heap-buffer-overflow in dav1dFeedData","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21947\n\n```\nCrash type: Heap-buffer-overflow READ {*}\nCrash state:\ndav1dFeedData\ndav1dCodecGetNextImage\navifDecoderNextImage\n```\n","status":"published","published":"2020-07-22T21:49:44.588962Z","modified":"2022-04-13T03:34:31.037013Z","updated_at":"2026-11-02T15:52:48.304316Z"}]}}