OSV-2020-2093 Heap-buffer-overflow in ExpandPictureChroma_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26570 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ExpandPictureChromac ExpandReferencingPicture WelsDec::WelsCheckAndRecoverForFutureDecoding...

openh264:decoder_fuzzer: Heap-buffer-overflow in ExpandPictureChroma_c

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=6044119698505728 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...