OSV-2020-2063 Heap-buffer-overflow in WelsDec::WelsDecodeMbCavlcBSlice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26296 Crash type: Heap-buffer-overflow WRITE 16 Crash state: WelsDec::WelsDecodeMbCavlcBSlice WelsDec::WelsDecodeSlice WelsDec::DecodeCurrentAccessUnit...

PT-2020-22074

Name of the Vulnerable Software and Affected Versions OpenSource version affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details indicate that the crash occurs in the WelsDec::WelsDecodeMbCavlcBSlice function, which is called by...

openh264:decoder_fuzzer: Heap-buffer-overflow in WelsDec::WelsDecodeMbCavlcBSlice

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5678087536377856 Project: openh264 Fuzzing Engine: honggfuzz Fuzz Target: decoderfuzzer Job Type: honggfuzzasanopenh264 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash Address:...

OSV-2020-2045 Use-of-uninitialized-value in WelsDec::GetColocatedMb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26272 Crash type: Use-of-uninitialized-value Crash state: WelsDec::GetColocatedMb WelsDec::PredBDirectTemporal WelsDec::WelsDecodeMbCavlcBSlice...

PT-2020-22069

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: WelsDec::GetColocatedMb,...

OSV-2020-1172 Global-buffer-overflow in WelsDec::ParseInterBInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12652 Crash type: Global-buffer-overflow READ 1 Crash state: WelsDec::ParseInterBInfo WelsDec::WelsActualDecodeMbCavlcBSlice WelsDec::WelsDecodeMbCavlcBSlice...

OSV-2020-1042 Heap-use-after-free in WelsDec::MapColToList0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14267 Crash type: Heap-use-after-free READ 4 Crash state: WelsDec::MapColToList0 WelsDec::PredBDirectTemporal WelsDec::WelsDecodeMbCavlcBSlice...

PT-2020-21745

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash occurs in the WelsDec::ParseInterBInfo,...

PT-2020-21667

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported. The crash involves the functions WelsDec::MapColToList0, WelsDec::PredBDirectTemporal, and...

OSV-2020-414 Heap-use-after-free in WelsDec::MapColToList0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14035 Crash type: Heap-use-after-free READ 4 Crash state: WelsDec::MapColToList0 WelsDec::PredBDirectTemporal WelsDec::WelsDecodeMbCavlcBSlice...

PT-2020-22309

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported. The crash involves the functions WelsDec::MapColToList0, WelsDec::PredBDirectTemporal, and...