CVE-2024-56431

oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.

Affected products

Debian, Suse, Theora, Libtheora

Xiph Theora

< 1.2.0

CVSS 3.1

9.8 CRITICAL

EPSS

1.9% (78th percentile)

Weakness

CWE-863

NVD status

Modified

Published

2024-12-25