All errata/sisyphus/ALT-PU-2017-2415-1
ALT-PU-2017-2415-1

Package update x265 in branch sisyphus

Version2.5-alt1
Published2017-10-11
Max severityMEDIUM
Severity:

Closed issues (1)

CVE-2017-8906
MEDIUM5.5

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_encoder_encode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in the process of encoding.

Published: 2017-05-11Modified: 2025-04-20
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H