CVE-2017-13666

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and…

published August 24, 2017

CVSS
—
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can cause an integer underflow, which leads to a crash. This is a different vulnerability than CVE-2017-8906.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00382 · 30.8th percentile
Published
2017-08-24T06:00Z
EPSS history
Timeline
  • 24 AUG 06:00Z
    An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and…
    cvelistv5