projects / libde265.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fdfe556) | patch
CVE-2026-45382: fix CTB OOB access when pps.sps mismatches active sps
authorDebian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Thu, 6 Aug 2026 05:05:03 +0000 (13:05 +0800)
committerAron Xu <aron@debian.org>
Thu, 6 Aug 2026 05:05:03 +0000 (13:05 +0800)
commit928fe7a3ea12c7c75f844a5c563066e8f8ddce52
tree46ace37a5b143cee7e7c9712a193d49bfe4ac3bctree | snapshot
parentfdfe556cc81c82929ddde245ab545412ec27e075commit | diff
CVE-2026-45382: fix CTB OOB access when pps.sps mismatches active sps

Origin: upstream, https://github.com/strukturag/libde265/commit/c33b4f63ae9056b00f34a31874fed55cd0aa29c9
Bug: https://github.com/strukturag/libde265/security/advisories/GHSA-hwhx-x2mq-ccr9
Applied-Upstream: 1.0.19

Malformed PPS data creates an out-of-bounds index into the CtbAddrRStoTS
array, causing a heap-buffer-overflow read in decode_slice_unit_tiles.

Gbp-Pq: Name CVE-2026-45382.patch
libde265/decctx.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.