OSV-2024-233 Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66003 Crash type: Use-of-uninitialized-value Crash state: WelsDec::CWelsDecoder::ReorderPicturesInDisplay WelsDec::CWelsDecoder::DecodeFrame2WithCtx WelsDec::CWelsDecoder::DecodeFrame2...

PT-2024-40685 · Git +1 · Openh264

Name of the Vulnerable Software and Affected Versions: Open-source software affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the WelsDec::CWelsDecoder class, specifically in the ReorderPicturesInDisplay,...

OSV-2020-1127 Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12647 Crash type: Use-of-uninitialized-value Crash state: WelsDec::CWelsDecoder::ReorderPicturesInDisplay WelsDec::CWelsDecoder::DecodeFrame2 WelsDec::CWelsDecoder::DecodeFrameNoDelay...

OSV-2020-261 Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReleaseBufferedReadyPicture

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18744 Crash type: Use-of-uninitialized-value Crash state: WelsDec::CWelsDecoder::ReleaseBufferedReadyPicture WelsDec::CWelsDecoder::ReorderPicturesInDisplay WelsDec::CWelsDecoder::DecodeFrame2WithCtx...

openh264:decoder_fuzzer: Crash in WelsDec::CWelsDecoder::DecodeFrame2WithCtx

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5718090986029056 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerubsanopenh264 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fdd6a6f5080 Cras...

openh264:decoder_fuzzer: Heap-use-after-free in WelsDec::CWelsDecoder::SetOption

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5693903391162368 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasani386openh264 Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address:...