CVEvulnerability

CVE-2017-13666

5.5 MEDIUM Published 2017-08-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-191

Description

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can cause an integer underflow, which leads to a crash. This is a different vulnerability than CVE-2017-8906.

Affected configurations

• multicorewareinc x265 0.1 • multicorewareinc x265 0.2 • multicorewareinc x265 0.3 • multicorewareinc x265 0.4 • multicorewareinc x265 0.4.1 • multicorewareinc x265 0.5 • multicorewareinc x265 0.6 • multicorewareinc x265 0.7 • multicorewareinc x265 0.8 • multicorewareinc x265 0.9 • multicorewareinc x265 1 • multicorewareinc x265 1.1 • multicorewareinc x265 1.2 • multicorewareinc x265 1.3 • multicorewareinc x265 1.4 • multicorewareinc x265 1.5 • multicorewareinc x265 1.6 • multicorewareinc x265 1.7 • multicorewareinc x265 1.8 • multicorewareinc x265 1.9 • multicorewareinc x265 2.0 • multicorewareinc x265 2.1 • multicorewareinc x265 2.2 • multicorewareinc x265 2.3 • multicorewareinc x265 2.4 • multicorewareinc x265 2.5

Related

Weakness · CWE (1)

  • CWE-191 Integer Underflow (Wrap or Wraparound) weakness

References