The @ImageMagick project is using the oss-fuzz tooling of google and with the attached file there is a heap buffer overflow read in `derive_collocated_motion_vectors` on this line:
https://github.com/strukturag/libde265/blob/e587ef6e8000662b91c35ccb866c2374d3a40e27/libde265/motion.cc#L1217

When stepping through this with a debugger I noticed that `refIdxCol` was `-51`.

Test file: [test.zip](https://github.com/strukturag/libde265/files/8837168/test.zip)

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22170
Heap buffer overflow READ 1 in derive_collocated_motion_vectors
This is a GitHub Issue
repo:libde265
owner:strukturag
Title : Heap buffer overflow READ 1 in derive_collocated_motion_vectors
Issue date:

--- start body ---
The @ImageMagick project is using the oss-fuzz tooling of google and with the attached file there is a heap buffer overflow read in `derive_collocated_motion_vectors` on this line:
https://github.com/strukturag/libde265/blob/e587ef6e8000662b91c35ccb866c2374d3a40e27/libde265/motion.cc#L1217

When stepping through this with a debugger I noticed that `refIdxCol` was `-51`.

Test file: [test.zip](https://github.com/strukturag/libde265/files/8837168/test.zip)

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22170
--- end body ---
