Описание
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.
Ссылки
- https://github.com/AOMediaCodec/libavif/security/advisories/GHSA-762c-2538-h844
- https://nvd.nist.gov/vuln/detail/CVE-2025-48175
- https://github.com/AOMediaCodec/libavif/pull/2769
- https://github.com/AOMediaCodec/libavif/commit/64d956ed5a602f78cebf29da023280944ee92efd
- https://lists.debian.org/debian-lts-announce/2025/05/msg00031.html
Связанные уязвимости
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer o ...
Уязвимость функции avifImageRGBToYUV компонента reformat.c библиотеки для кодирования и декодирования файлов .avif Libavif, позволяющая нарушителю нарушить целостность данных, а также вызвать отказ в обслуживании
