4 matches found
CVE-2025-54957
The Dolby Unified Decoder (UDC) , affecting versions 4.5 through 4.13, contains an integer wraparound vulnerability in the evo_malloc function. When processing a malformed DD+ bitstream, the length calculation for an EMDF payload write can overflow, resulting in a buffer overrun on the evo heap. ...
CVE-2025-54957
An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When Evolution data is processed by evopriv.c from the DD+ bitstream, the decoder writes that data into a buffer. The length calculation for a write can...
CVE-2025-54957
An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When Evolution data is processed by evopriv.c from the DD+ bitstream, the decoder writes that data into a buffer. The length calculation for a write can...