← Back

CVE-2017-13666

nvd nist
Published: Aug 24, 2017Modified: May 13, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can cause an integer underflow, which leads to a crash. This is a different vulnerability than CVE-2017-8906.

Affected (26)

Multicorewareinc
1 product
X265
Configuration A
26 vulnerable
Vulnerable SoftwareAffected Versions
Multicorewareinc
X265
Version 0.1
X265
Version 0.2
X265
Version 0.3
X265
Version 0.4.1
X265
Version 0.4
X265
Version 0.5
X265
Version 0.6
X265
Version 0.7
X265
Version 0.8
X265
Version 0.9
X265
Version 1.1
X265
Version 1.2
X265
Version 1.3
X265
Version 1.4
X265
Version 1.5
X265
Version 1.6
X265
Version 1.7
X265
Version 1.8
X265
Version 1.9
X265
Version 1
X265
Version 2.0
X265
Version 2.1
X265
Version 2.2
X265
Version 2.3
X265
Version 2.4
X265
Version 2.5

Related CWEs

CWE-191
Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References (2)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.