projects / libde265.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e788d39) | patch
CVE-2026-45382: fix CTB OOB access when pps.sps mismatches active sps
authorDebian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Sun, 30 Aug 2026 20:56:35 +0000 (22:56 +0200)
committerMoritz Mühlenhoff <jmm@debian.org>
Sun, 30 Aug 2026 20:56:35 +0000 (22:56 +0200)
commitbd8efacb47acae77f5ba6a6ac56bbf44f4d29734
tree08648cb9cb35a5c23c8e035f8b88774ff770ef76tree | snapshot
parente788d39a7a9a724e86a2ec84dadea9fbb5a42360commit | diff
CVE-2026-45382: fix CTB OOB access when pps.sps mismatches active sps

Origin: upstream, https://github.com/strukturag/libde265/commit/c33b4f63ae9056b00f34a31874fed55cd0aa29c9
Bug: https://github.com/strukturag/libde265/security/advisories/GHSA-hwhx-x2mq-ccr9
Applied-Upstream: 1.0.19

Malformed PPS data creates an out-of-bounds index into the CtbAddrRStoTS
array, causing a heap-buffer-overflow read in decode_slice_unit_tiles.

Gbp-Pq: Name CVE-2026-45382.patch
libde265/decctx.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.