OSV-2026-886

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libhevc/OSV-2026-886.yaml
JSON Data
https://api.test.osv.dev/v1/vulns/OSV-2026-886
Published
2026-06-08T00:10:39.649555Z
Modified
2026-06-09T12:30:06.620809768Z
Summary
Heap-buffer-overflow in ihevcd_fmt_conv
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=520748344

Crash type: Heap-buffer-overflow WRITE 8
Crash state:
ihevcd_fmt_conv
ihevcd_decode
Codec::decodeFrame
References

Affected packages

OSS-Fuzz / libhevc

Package

Name
libhevc
Purl
pkg:generic/libhevc

Affected ranges

Type
GIT
Repo
https://github.com/ittiam-systems/libhevc.git
Events
Introduced
f6ef16b0f9f74f5d15843ca336c098c93b18aac6
Fixed
57d79be23a349723cb419600b190e85f0dd99357

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libhevc/OSV-2026-886.yaml"
introduced_range 
"1f0d11ce8f1a5ac141dc6a8d235d6338f46e24a4:1fac8cc5fea9acf88fce10fdd4481e103724ef59"