{"action":"Upgrade libtheora to 1.2.0~alpha1+dfsg-6 or later.","affected":[{"fixed":"1.2.0~alpha1+dfsg-6","introduced":"0"}],"component":"libtheora","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.2.0~alpha1+dfsg-6"],"id":"tcs_01M5NMFWEEZKX7HWV5EDR0P3KC","modified_at":"2026-09-15T09:03:04.733174427Z","published_at":"2024-12-25T17:15:05.510Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2024-56431","https://security-tracker.debian.org/tracker/CVE-2024-56431"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2024-56431#Debian:14/libtheora","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2024-56431"}],"summary":"oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impac"}