]> dgit.raspbian.org Git - libde265.git/commit
projects / libde265.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 04dc819) | patch
CVE-2026-45383: prevent reading past end of CtbAddrRStoTS[] in WPP images
authorDebian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Sun, 20 Sep 2026 11:47:08 +0000 (13:47 +0200)
committerTobias Frost <tobi@debian.org>
Sun, 20 Sep 2026 11:47:08 +0000 (13:47 +0200)
commitd1cb772e440ae2b92505fa3708fbb778d8c99e22
tree6aafd631b565298e5fc3de53be5894e29d300397tree | snapshot
parent04dc81994856239a6c0b65d92ffa43ff14391726commit | diff
CVE-2026-45383: prevent reading past end of CtbAddrRStoTS[] in WPP images

Origin: upstream, https://github.com/strukturag/libde265/commit/d1a2c3b4b751d21f44e8e82220fe9766c9d116ff
Bug: https://github.com/strukturag/libde265/security/advisories/GHSA-wg9q-ppqw-6q38
Applied-Upstream: 1.0.19

In the WPP slice decoder ctbAddrRS = ctbRow * ctbsWidth can exceed the
allocated vector size, causing out-of-bounds reads.

Gbp-Pq: Name CVE-2026-45383.patch
libde265/decctx.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.