| Package | Affected versions | Patched versions |
|---|---|---|
| x265 | = 0.1= 0.2= 0.3= 0.4= 0.4.1= 0.5= 0.6= 0.7= 0.8= 0.9= 1= 1.1= 1.2= 1.3= 1.4= 1.5= 1.6= 1.7= 1.8= 1.9= 2.0= 2.1= 2.2= 2.3= 2.4= 2.5 |
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can cause an integer underflow, which leads to a crash. This is a different vulnerability than CVE-2017-8906.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free