Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-13666

Опубликовано: 24 авг. 2017
Источник: nvd
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can cause an integer underflow, which leads to a crash. This is a different vulnerability than CVE-2017-8906.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:multicorewareinc:x265:0.1:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:0.2:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:0.3:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:0.4:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:0.5:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:0.6:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:0.7:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:0.8:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:0.9:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:1:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:1.1:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:1.2:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:1.3:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:1.4:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:1.5:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:1.6:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:1.7:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:1.8:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:1.9:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:2.0:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:2.1:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:2.2:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:2.3:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:2.4:*:*:*:*:*:*:*
cpe:2.3:a:multicorewareinc:x265:2.5:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00096
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-191

Связанные уязвимости

ubuntu логотип

CVE-2017-13666

CVSS3: 5.5
ubuntu
больше 8 лет назад

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can cause an integer underflow, which leads to a crash. This is a different vulnerability than CVE-2017-8906.

debian логотип

CVE-2017-13666

CVSS3: 5.5
debian
больше 8 лет назад

An integer underflow vulnerability exists in pixel-a.asm, the x86 asse ...

github логотип

GHSA-rvv7-6w95-x7c7

CVSS3: 5.5
github
больше 3 лет назад

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can cause an integer underflow, which leads to a crash. This is a different vulnerability than CVE-2017-8906.

EPSS

Процентиль: 27%
0.00096
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-191