| Package | Affected versions | Patched versions |
|---|---|---|
| theora | < 1.2.0 | 1.2.0 |
oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free