projects / libde265.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bd8efac) | patch
CVE-2026-45383: prevent reading past end of CtbAddrRStoTS[] in WPP images
authorDebian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Sun, 30 Aug 2026 20:56:35 +0000 (22:56 +0200)
committerMoritz Mühlenhoff <jmm@debian.org>
Sun, 30 Aug 2026 20:56:35 +0000 (22:56 +0200)
commitd279733bd63cc4f78766578e6afbfd420528915f
tree0022a48699707abe01991060c42def1d8d797df3tree | snapshot
parentbd8efacb47acae77f5ba6a6ac56bbf44f4d29734commit | diff
CVE-2026-45383: prevent reading past end of CtbAddrRStoTS[] in WPP images

Origin: upstream, https://github.com/strukturag/libde265/commit/d1a2c3b4b751d21f44e8e82220fe9766c9d116ff
Bug: https://github.com/strukturag/libde265/security/advisories/GHSA-wg9q-ppqw-6q38
Applied-Upstream: 1.0.19

In the WPP slice decoder ctbAddrRS = ctbRow * ctbsWidth can exceed the
allocated vector size, causing out-of-bounds reads.

Gbp-Pq: Name CVE-2026-45383.patch
libde265/decctx.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.