CVE-2020-36407: Aomedia Libavif

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.

Affected products

• Aomedia Libavif: version 0.8.0 only; version 0.8.1 only

Published 2021-07-01. Last modified 2026-06-17.