{"id":"OSV-2024-719","aliases":[],"status":"published","title":"Heap-buffer-overflow in hevc_ref_pic_lists_modification","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70890\n\n```\nCrash type: Heap-buffer-overflow WRITE 4\nCrash state:\nhevc_ref_pic_lists_modification\ngf_hevc_parse_nalu_bs\ngf_inspect_dump_nalu_internal\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2024-08-07T00:05:22.699506Z","modified":"2026-11-12T14:45:02Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"gpac","ranges":[{"type":"GIT","events":[{"introduced":"21cf0d2d4a0d6e5d14ffaa8472c9157f1333d379"}]}],"versions":["testtag0.1","abi-12","abi-12.16","abi-12.17","abi-12.18","abi-12.19","abi-12.20","abi-12.21","abi-12.22","abi-12.23","abi-12.24","abi-12.25","abi-12.26","abi-12.27","abi-13","abi-13.0","abi-14","abi-14.0","abi-15","abi-15.0","abi-15.1","abi-15.2","abi-16","abi-16.2","abi-16.3","abi-16.4","abi-16.5","v26.02.0","abi-16.6","abi-16.7","abi-16.8","abi-16.9","abi-16.10","abi-16.11","abi-16.12","abi-16.13","abi-16.14","abi-16.15","abi-16.16","abi-16.17","abi-16.18","abi-16.19","abi-16.20","abi-16.21","abi-16.22","v26.07.0","abi-16.23","abi-16.24","abi-16.25","abi-16.26","abi-16.27","abi-16.28","abi-16.29","abi-16.30"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70890","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2024-719","title":"Heap-buffer-overflow in hevc_ref_pic_lists_modification","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70890\n\n```\nCrash type: Heap-buffer-overflow WRITE 4\nCrash state:\nhevc_ref_pic_lists_modification\ngf_hevc_parse_nalu_bs\ngf_inspect_dump_nalu_internal\n```\n","status":"published","published":"2024-08-07T00:05:22.699506Z","modified":"2026-11-12T14:45:02.855845907Z","updated_at":"2026-11-12T14:53:08.089545Z"}]}}