projects / libde265.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 928fe7a) | patch
CVE-2026-45383: prevent reading past end of CtbAddrRStoTS[] in WPP images
authorDebian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Thu, 6 Aug 2026 05:05:03 +0000 (13:05 +0800)
committerAron Xu <aron@debian.org>
Thu, 6 Aug 2026 05:05:03 +0000 (13:05 +0800)
commit54620fea74e6595f5cba0fc4f523226bce932558
treed5ad70e2ed8100aa81cf44558140d63d3ff90f9etree | snapshot
parent928fe7a3ea12c7c75f844a5c563066e8f8ddce52commit | diff
CVE-2026-45383: prevent reading past end of CtbAddrRStoTS[] in WPP images

Origin: upstream, https://github.com/strukturag/libde265/commit/d1a2c3b4b751d21f44e8e82220fe9766c9d116ff
Bug: https://github.com/strukturag/libde265/security/advisories/GHSA-wg9q-ppqw-6q38
Applied-Upstream: 1.0.19

In the WPP slice decoder ctbAddrRS = ctbRow * ctbsWidth can exceed the
allocated vector size, causing out-of-bounds reads.

Gbp-Pq: Name CVE-2026-45383.patch
libde265/decctx.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.