tocsin

Debian/libavif: medium 6.5

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.

Action: Upgrade libavif to 0.11.1-1+deb12u1 or later.

Affected

introducedfixedlast affected
00.11.1-1+deb12u1-

Fixed versions

0.11.1-1+deb12u1

Sources

published · modified · JSON