Description (CNA)
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| aomedia / libavif | affected 0 before 1.3.0 |
CWE
CWE-190
References
- https://github.com/AOMediaCodec/libavif/commit/64d956ed5a602f78cebf29da023280944ee92efd
- https://github.com/AOMediaCodec/libavif/pull/2769
- https://github.com/AOMediaCodec/libavif/security/advisories/GHSA-762c-2538-h844
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.