{"id":"OSV-2024-659","aliases":[],"status":"published","title":"Index-out-of-bounds in gf_vvc_parse_nalu_bs","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392\n\n```\nCrash type: Index-out-of-bounds\nCrash state:\ngf_vvc_parse_nalu_bs\ngf_inspect_dump_nalu_internal\ninspect_process\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2024-07-18T00:01:18.765548Z","modified":"2026-11-12T14:45:02Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"gpac","ranges":[{"type":"GIT","events":[{"introduced":"99a7952e91938f8c0d16f2235b912de1fed6c1f8"}]}],"versions":["testtag0.1","abi-12","abi-12.16","abi-12.17","abi-12.18","abi-12.19","abi-12.20","abi-12.21","abi-12.22","abi-12.23","abi-12.24","abi-12.25","abi-12.26","abi-12.27","abi-13","abi-13.0","abi-14","abi-14.0","abi-15","abi-15.0","abi-15.1","abi-15.2","abi-16","abi-16.2","abi-16.3","abi-16.4","abi-16.5","v26.02.0","abi-16.6","abi-16.7","abi-16.8","abi-16.9","abi-16.10","abi-16.11","abi-16.12","abi-16.13","abi-16.14","abi-16.15","abi-16.16","abi-16.17","abi-16.18","abi-16.19","abi-16.20","abi-16.21","abi-16.22","v26.07.0","abi-16.23","abi-16.24","abi-16.25","abi-16.26","abi-16.27","abi-16.28","abi-16.29","abi-16.30"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2024-659","title":"Index-out-of-bounds in gf_vvc_parse_nalu_bs","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392\n\n```\nCrash type: Index-out-of-bounds\nCrash state:\ngf_vvc_parse_nalu_bs\ngf_inspect_dump_nalu_internal\ninspect_process\n```\n","status":"published","published":"2024-07-18T00:01:18.765548Z","modified":"2026-11-12T14:45:02.853786785Z","updated_at":"2026-11-12T14:53:08.553397Z"}]}}