security1 publisher
Signed int arithmetic in libde265 shrinks a 4 GB plane allocation to 1,040 bytes before the fill
The proof of concept in strukturag's advisory declares a 33800 by 63520 picture at 16-bit depth, wraps the signed size calculation, and lets fill_plane write 4,294,968,336 bytes into the undersized heap buffer.
Publishers:github.com
Reality
- Evidence76
- Adoption
- Insufficient
- Hype gap+12
- Incentives22
- Confidence72