From 09a36d022b6903f8c2440ec641a49f2231605f0b Mon Sep 17 00:00:00 2001 From: Debian Multimedia Maintainers Date: Thu, 15 Feb 2024 21:06:55 +0000 Subject: [PATCH] CVE-2023-49465 commit 1475c7d2f0a6dc35c27e18abc4db9679bfd32568 Author: Dirk Farin Date: Thu Nov 23 19:43:55 2023 +0100 possible fix for #435 Gbp-Pq: Name CVE-2023-49465.patch --- libde265/motion.cc | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/libde265/motion.cc b/libde265/motion.cc index f33e23f..f4fa068 100644 --- a/libde265/motion.cc +++ b/libde265/motion.cc @@ -1859,7 +1859,14 @@ void derive_spatial_luma_vector_prediction(base_context* ctx, logmvcand(vi); const de265_image* imgX = NULL; - if (vi.predFlag[X]) imgX = ctx->get_image(shdr->RefPicList[X][ vi.refIdx[X] ]); + if (vi.predFlag[X]) { + if (vi.refIdx[X] < 0 || vi.refIdx[X] >= MAX_NUM_REF_PICS) { + return; + } + + imgX = ctx->get_image(shdr->RefPicList[X][ vi.refIdx[X] ]); + } + const de265_image* imgY = NULL; if (vi.predFlag[Y]) imgY = ctx->get_image(shdr->RefPicList[Y][ vi.refIdx[Y] ]); -- 2.30.2