{"id": "OSSFUZZ-20626", "type": "ossfuzz", "bulletinFamily": "software", "title": "ffmpeg:ffmpeg_AV_CODEC_ID_MVDV_fuzzer: Heap-buffer-overflow in decode_mvdv", "description": "Project:\nhttps://git.ffmpeg.org/ffmpeg.git\n\nDetailed Report: https://oss-fuzz.com/testcase?key=6279905350516736\n\nProject: ffmpeg\nFuzzing Engine: afl\nFuzz Target: ffmpeg_AV_CODEC_ID_MVDV_fuzzer\nJob Type: afl_asan_ffmpeg\nPlatform Id: linux\n\nCrash Type: Heap-buffer-overflow READ 1\nCrash Address: 0x60a00076f1a6\nCrash State:\n decode_mvdv\n decode_frame\n decode_simple_internal\n \nSanitizer: address (ASAN)\n\nRecommended Security Severity: Medium\n\nRegressed: https://oss-fuzz.com/revisions?job=afl_asan_ffmpeg&range=201911270352:201911280356\n\nReproducer Testcase: https://oss-fuzz.com/download?testcase_id=6279905350516736\n\nIssue filed automatically.\n\nSee https://google.github.io/oss-fuzz/advanced-topics/reproducing for instructions to reproduce this bug locally.\nWhen you fix this bug, please\n * mention the fix revision(s).\n * state whether the bug was a short-lived regression or an old bug in any stable releases.\n * add any other useful information.\nThis information can help downstream consumers.\n\nIf you need to contact the OSS-Fuzz team with a question, concern, or any other feedback, please file an issue at https://github.com/google/oss-fuzz/issues. Comments on individual Monorail issues are not monitored.\n\nThis bug is subject to a 90 day disclosure deadline. If 90 days elapse\nwithout an upstream patch, then the bug report will automatically\nbecome visible to the public.", "published": "2020-02-10T18:34:20", "modified": "2020-03-15T19:00:58", "cvss": {}, "href": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20626", "reporter": "Google", "references": [], "cvelist": [], "lastseen": "2020-04-03T16:38:24", "viewCount": 0, "enchantments": {"dependencies": {}, "score": {"value": -0.9, "vector": "NONE"}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.9}, "ossfuzz": {"issue": 20626, "status": "Verified", "project": "ffmpeg", "ref": "https://oss-fuzz.com/revisions?job=afl_asan_ffmpeg&range=202002130403:202002140404", "crashType": "Heap-buffer-overflow READ 1", "revisions": ["018a42790ce12d19940991a49e26f85e7717159c:6d37ca8a4e8a527cbeff2a011862b3042a8d3e34"], "project_repos": ["https://git.ffmpeg.org/ffmpeg.git"], "tags": ["4.3-dev", "4.2-dev", "4.1-dev", "3.5-dev", "3.4-dev", "3.3-dev", "3.2-dev", "3.1-dev", "2.9-dev", "2.8-dev", "2.7-dev", "2.6-dev", "2.5-dev", "2.4-dev", "2.3-dev", "2.2-dev", "2.1-dev", "2.0", "1.3-dev", "1.2-dev", "1.1-dev", "0.12-dev", "0.11-dev", "0.8"]}, "affectedSoftware": [{"name": "ffmpeg", "version": "4.3-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "4.2-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "4.1-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "3.5-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "3.4-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "3.3-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "3.2-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "3.1-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "2.9-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "2.8-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "2.7-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "2.6-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "2.5-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "2.4-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "2.3-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "2.2-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "2.1-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "2.0", "operator": "eq"}, {"name": "ffmpeg", "version": "1.3-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "1.2-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "1.1-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "0.12-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "0.11-dev", "operator": "eq"}, {"name": "ffmpeg", "version": "0.8", "operator": "eq"}], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645582010}}

{}