See how theora compares to other vendors in security performance
Severity: - moderate
Affected versions: - libtheora through 1.2.3
Fixed software: - v1.2.3
Description: This issue involves a NULL pointer dereference in the BinFHEContext::EvalFloor function within the lib/binfhe-base-scheme.cpp file. potentially resulting in an application crash by triggering the dereference of a NULL pointer.
For more information ------------------------------------------------------------- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56430 https://github.com/UnionTech-Software/openfhe-PoC https://github.com/openfheorg/openfhe-development/blob/7b8346f4eac27121543e36c17237b919e03ec058/src/binfhe/lib/binfhe-base-scheme.cpp#L307-L308
ochufftreeunpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.