PT-2026-35334

Integer overflow in libaom internal function img alloc helper can lead to heap buffer overflow. This function can be reached via 3 callers: - Calling aom img alloc with a large value of the d w, d h, or align parameter may result in integer overflows in the calculations of buffer sizes and offset...