OSV-2023-844

    Dashboard / Vulnerabilities / OSV-2023-844

    OSV-2023-844

    Published: 14 Sept 2023Last Modified: 5 Oct 2026

    Summary: Heap-buffer-overflow in Video::VP9::Decoder::create_video_frame

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62307 ``` Crash type: Heap-buffer-overflow READ {*} Crash state: Video::VP9::Decoder::create_video_frame Video::VP9::Decoder::decode_frame Video::VP9::Decoder::receive_sample ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62307

    Affected packages

    Package

    Name: serenity

    Purl: pkg:generic/serenity

    Affected ranges

    Type: GIT

    Events:

    Introduced- bfd6deed1e860ce9516c7ca1613150a2c2c75f75
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-844 | CVE-DB