Medium severity5.5NVD Advisory· Published May 11, 2017· Updated Jun 17, 2026
CVE-2017-8906
CVE-2017-8906
Description
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_encoder_encode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in the process of encoding.
Affected products
1- cpe:2.3:a:multicorewareinc:x265_high_efficiency_video_coding:*:*:*:*:*:*:*:*Range: <=2.4
Patches
Vulnerability mechanics
References
1- bitbucket.org/multicoreware/x265/issues/345/integer-underflow-in-x265-source-commonnvdExploitIssue TrackingPatchThird Party Advisory
News mentions
0No linked articles in our index yet.