VDB
BDU%3A2025-04733
BDU%3A2025-04733
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции oc_huff_tree_unpack видеокодека Theora, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| Xiph.Org Foundation | Theora |
Timeline
- Dec 25, 2024 CVE Published
- Dec 25, 2024 PoC Published
- Dec 25, 2024 PoC Published
- Dec 25, 2024 PoC Published
- Feb 18, 2025 PoC Published
- Apr 22, 2025 CVE Updated
- Apr 25, 2025 PoC Published
- Apr 25, 2025 PoC Published
- Apr 25, 2025 PoC Published
- Apr 25, 2025 PoC Published
- Apr 25, 2025 PoC Published
- Apr 26, 2025 PoC Published
References
- https://www.openwall.com/lists/oss-security/2025/04/25/6 url
- http://www.openwall.com/lists/oss-security/2025/04/25/4 url
- http://www.openwall.com/lists/oss-security/2025/04/25/6 url
- https://gitlab.xiph.org/xiph/theora advisory
- https://github.com/UnionTech-Software/libtheora-CVE-2024-56431-PoC url
- https://github.com/xiph/theora/blob/7180717276af1ebc7da15c83162d6c5d6203aabf/lib/huffdec.c#L193 url
- https://github.com/xiph/theora/issues/17#issuecomment-2480630603 url