CVE Vulnerabilities

CVE-2024-56431

Published: Dec 25, 2024 | Modified: Dec 31, 2024

CVSS 3.x

N/A

Source:

NVD

CVSS 2.x

RedHat/V2

RedHat/V3

3.3 LOW

Ubuntu

MEDIUM

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-56431
CWE	https://cwe.mitre.org/data/definitions/.html

oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift.

References

https://github.com/UnionTech-Software/libtheora-CVE-2024-56431-PoC
https://github.com/xiph/theora/blob/7180717276af1ebc7da15c83162d6c5d6203aabf/lib/huffdec.c#L193
https://github.com/xiph/theora/issues/17#issuecomment-2480630603

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.