All errata/sisyphus/ALT-PU-2018-1928-1
ALT-PU-2018-1928-1

Package update x265 in branch sisyphus

Version2.8-alt1
Published2018-06-25
Max severityMEDIUM
Severity:

Closed issues (1)

CVE-2017-13666
MEDIUM5.5

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can cause an integer underflow, which leads to a crash. This is a different vulnerability than CVE-2017-8906.

Published: 2017-08-24Modified: 2025-04-20
CVSS 2.0LOW 2.1
CVSS:2.0/AV:L/AC:L/Au:N/C:N/I:N/A:P
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H