OSV-2020-1145 Heap-buffer-overflow in ihevcd_sao_shift_ctb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16817 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ihevcdsaoshiftctb ihevcdprocess ihevcdparseslicedata...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_sao_shift_ctb

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5664358859800576 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasanlibhevc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...

Out-of-bounds

In ihevcdsaoshiftctb of ihevcdsao.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

CVE-2019-2106

CVE-2019-2106 affects Android’s Media framework: in ihevcd_sao_shift_ctb of ihevcd_sao.c, a missing bounds check can cause an out-of-bounds write leading to remote code execution. Impacted Android versions include 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. The issue is described in the July 2019 Android...