CVE-2024-56431

oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third partie...

Original description

The description as published by the source.

oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-56431 libtheora Fixed in: 1.2.0~alpha1+dfsg-6

References

advisory github.com
advisory nvd.nist.gov
package github.com
report github.com
web openwall.com
web openwall.com
web github.com
web openwall.com