OSV-2020-2063 Heap-buffer-overflow in WelsDec::WelsDecodeMbCavlcBSlice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26296 Crash type: Heap-buffer-overflow WRITE 16 Crash state: WelsDec::WelsDecodeMbCavlcBSlice WelsDec::WelsDecodeSlice WelsDec::DecodeCurrentAccessUnit...

OSV-2020-2045 Use-of-uninitialized-value in WelsDec::GetColocatedMb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26272 Crash type: Use-of-uninitialized-value Crash state: WelsDec::GetColocatedMb WelsDec::PredBDirectTemporal WelsDec::WelsDecodeMbCavlcBSlice...

OSV-2020-1172 Global-buffer-overflow in WelsDec::ParseInterBInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12652 Crash type: Global-buffer-overflow READ 1 Crash state: WelsDec::ParseInterBInfo WelsDec::WelsActualDecodeMbCavlcBSlice WelsDec::WelsDecodeMbCavlcBSlice...

OSV-2020-1042 Heap-use-after-free in WelsDec::MapColToList0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14267 Crash type: Heap-use-after-free READ 4 Crash state: WelsDec::MapColToList0 WelsDec::PredBDirectTemporal WelsDec::WelsDecodeMbCavlcBSlice...

OSV-2020-414 Heap-use-after-free in WelsDec::MapColToList0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14035 Crash type: Heap-use-after-free READ 4 Crash state: WelsDec::MapColToList0 WelsDec::PredBDirectTemporal WelsDec::WelsDecodeMbCavlcBSlice...