OSV-2020-1833 Heap-buffer-overflow in avifROStreamRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25903 Crash type: Heap-buffer-overflow READ 4 Crash state: avifROStreamRead avifROStreamReadU32 avifROStreamReadBoxHeader...

PT-2020-21990

Name of the Vulnerable Software and Affected Versions avif affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the avifROStreamRead function. Specifically, the crash happens when calling avifROStreamReadU32 and avifROStreamReadBoxHeader...

WS-2020-0363

libavif in versions 0.3.9 to 0.8.1 is vulnerable to Heap-buffer-overflow in avifROStreamRead , related to src/stream.c...