VDB
CESS-2025-48174
CESS-2025-48174
PUBLISHED
CVSS 9.1 CRITICAL
In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.
Risk Scores
CVSS 3.1
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Timeline
- May 16, 2025 CVE Published