CVE-2024-56431

ochufftree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.

Database specific

{
    "isDisputed": true
}

References

Affected packages

Git / github.com/xiph/theora

Affected ranges

Type: GIT
Repo: https://github.com/xiph/theora
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

8e4808736e9c181b971306cc3f05df9e61354004

Affected versions

v1.*

v1.2.0alpha1

v1.2.0beta1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-56431.json"

vanir_signatures

[
    {
        "deprecated": false,
        "id": "CVE-2024-56431-5fd57ccd",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "116269864363932077015583535569590980136",
                "33352859868732071628436217485916996324",
                "192476187473382053145762568385643970113",
                "112157494868063702721238919972890642378"
            ]
        },
        "source": "https://github.com/xiph/theora/commit/8e4808736e9c181b971306cc3f05df9e61354004",
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "lib/internal.h"
        }
    }
]