]> dgit.raspbian.org Git - libde265.git/commit
CVE-2026-45382: Heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated...
authorDebian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Sun, 20 Sep 2026 11:47:08 +0000 (13:47 +0200)
committerTobias Frost <tobi@debian.org>
Sun, 20 Sep 2026 11:47:08 +0000 (13:47 +0200)
commit04dc81994856239a6c0b65d92ffa43ff14391726
tree2996cf2c3d57d7708d0d13b2bd2a3a6bd85ec902
parent1cc6923884c622109bf40ea09796e3cc0fc85bcd
CVE-2026-45382: Heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry

Origin: https://github.com/strukturag/libde265/commit/c33b4f63ae9056b00f34a31874fed55cd0aa29c9
Bug: https://github.com/strukturag/libde265/security/advisories/GHSA-hwhx-x2mq-ccr9

From c33b4f63ae9056b00f34a31874fed55cd0aa29c9 Mon Sep 17 00:00:00 2001
From: Dirk Farin <dirk.farin@gmail.com>
Date: Sun, 10 May 2026 19:57:18 +0200
Subject: [PATCH] fix CTB OOB access when pps.sps mismatches active sps
 (GHSA-hwhx-x2mq-ccr9)

Gbp-Pq: Name CVE-2026-45382.patch
libde265/decctx.cc