CVE-2017-8906

CVE-2017-8906 describes an integer underflow in pixel-a.asm (planeClipAndMax) in MulticoreWare x265 up to version 2.4, as used by x265_encoder_encode in libbpg and other products. A small image can trigger the underflow, leading to a Denial of Service during encoding. The connected documents also...