Описание
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_encoder_encode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in the process of encoding.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | affected code is not enabled |
| cosmic | not-affected | affected code is not enabled |
| devel | not-affected | affected code is not enabled |
| disco | not-affected | affected code is not enabled |
| eoan | not-affected | affected code is not enabled |
| esm-apps-legacy/xenial | ignored | see notes |
| esm-apps/bionic | not-affected | affected code is not enabled |
| esm-apps/focal | not-affected | affected code is not enabled |
| esm-apps/jammy | not-affected | affected code is not enabled |
Показывать по
EPSS
4.3 Medium
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_encoder_encode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in the process of encoding.
An integer underflow vulnerability exists in pixel-a.asm, the x86 asse ...
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_encoder_encode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in the process of encoding.
ALT-PU-2017-2415: package `x265` update to version 2.5-alt1
EPSS
4.3 Medium
CVSS2
5.5 Medium
CVSS3