CVE-2017-8906

2022-10-0316:23:05

mitre

www.cve.org

cve-2017-8906

pixel-a.asm

x86 assembly code

multicoreware x265

libbpg

denial of service

encoding

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.2%

JSON

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_encoder_encode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in the process of encoding.