CVE-2024-56431 Information

Dec 26, 2024 cve

Description

oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift.

Reference

https://github.com/UnionTech-Software/libtheora-CVE-2024-56431-PoC https://github.com/xiph/theora/blob/7180717276af1ebc7da15c83162d6c5d6203aabf/lib/huffdec.c#L193 https://github.com/xiph/theora/issues/17#issuecomment-2480630603

Share on: