Bug 1980279 (CVE-2020-36407) - CVE-2020-36407 libavif: out-of-bounds write in avifDecoderDataFillImageGrid()
Summary: CVE-2020-36407 libavif: out-of-bounds write in avifDecoderDataFillImageGrid()
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2020-36407
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-07-08 08:58 UTC by Marian Rehak
Modified: 2021-10-28 05:30 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2021-10-28 05:30:26 UTC
Embargoed:

Attachments (Terms of Use)

Description Marian Rehak 2021-07-08 08:58:26 UTC 
libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.

External Reference:

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libavif/OSV-2020-1597.yaml
https://github.com/AOMediaCodec/libavif/commit/0a8e7244d494ae98e9756355dfbfb6697ded2ff9
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24811
Note You need to log in before you can comment on or make changes to this bug.