{"id":"OSV-2021-467","aliases":[],"status":"published","title":"Heap-buffer-overflow in void mc_chroma\u003cunsigned short\u003e","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31518\n\n```\nCrash type: Heap-buffer-overflow READ 2\nCrash state:\nvoid mc_chroma\u003cunsigned short\u003e\ngenerate_inter_prediction_samples\ndecode_prediction_unit\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-03-01T00:01:28.337558Z","modified":"2022-04-13T03:36:18Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"kimageformats","ranges":[{"type":"GIT","events":[{"introduced":"ca52d4ddf540cc731d0f31dbccc1897f7e6d9db4"},{"fixed":"957c199c68f6377441bc733d2672eb7656f1be0a"}]}],"versions":["v5.80.0","v5.80.0-rc1","v5.81.0","v5.81.0-rc1","v5.81.0-rc2","v5.82.0-rc1","v5.83.0","v5.83.0-rc1","v5.84.0-rc1","v5.85.0","v5.85.0-rc1","v5.86.0","v5.86.0-rc1","v5.87.0","v5.87.0-rc1","v5.88.0","v5.88.0-rc1"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31518","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2021-467","title":"Heap-buffer-overflow in void mc_chroma\u003cunsigned short\u003e","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31518\n\n```\nCrash type: Heap-buffer-overflow READ 2\nCrash state:\nvoid mc_chroma\u003cunsigned short\u003e\ngenerate_inter_prediction_samples\ndecode_prediction_unit\n```\n","status":"published","published":"2021-03-01T00:01:28.337558Z","modified":"2022-04-13T03:36:18.680417Z","updated_at":"2026-11-02T15:52:49.04248Z"}]}}