CVE-2020-36407

libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid...

CVE-2020-36407

CVE-2020-36407 affects libavif 0.8.0 and 0.8.1, where an out-of-bounds write occurs in avifDecoderDataFillImageGrid. The issue is described as a memory corruption vulnerability in the decoder path. CVSS data in the initial description cites a base score of 8.8 (HIGH, CVSS 3.1) with NETWORK attack...