security update
Артикул – MAS_StenkaARTO-5408-DSB, Бренд – МФ Мастер (Россия), Серия – Арто, Гарантия, месяцы – 24, Время изготовления, дней – 1-3, Ширина, мм – 2562, Выступ, мм – 400, Высота, мм – 2032, Цвет фасада – белый, Цвет корпуса – белый, дуб сонома, Материал фасада – ЛДСП Е1, Материал корпуса – ЛДСП Е1, Тип поверхности фасада […]
A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.
With a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. The ReadHuffmanCodes() function allocates the HuffmanCode buffer with a size that comes from an array of precomputed sizes: kTableSize. The color_cache_bits value defines which size to use. The kTableSize array only takes into account sizes for 8-bit first-level table lookups but not second-level table lookups. libwebp allows codes that are up to 15-bit (MAX_ALLOWED_CODE_LENGTH). When BuildHuffmanTable() attempts