OSV-2023-840

    Dashboard / Vulnerabilities / OSV-2023-840

    OSV-2023-840

    Published: 13 Sept 2023Last Modified: 13 Sept 2023

    Summary: Null-dereference READ in isvcd_parse_inter_slice_data_cavlc_enh_lyr

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62290 ``` Crash type: Null-dereference READ Crash state: isvcd_parse_inter_slice_data_cavlc_enh_lyr isvcd_parse_epslice isvcd_parse_decode_slice_ext_nal ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62290

    Affected packages

    Package

    Name: libavc

    Purl: pkg:generic/libavc

    Affected ranges

    Type: GIT

    Events:

    Introduced- b2a61a152a5e83b3419212e8d15a10d4488e51d9
    Fixed -82f4e69094b7d6e4200d14ba64ac9937f337710d

    Affected versions

    v1.1.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-840 | CVE-DB