oss-security - libav: out-of-bounds stack read

Message-ID: <2787791.31AdioJtTb@arcadia>
Date: Sat, 10 Sep 2016 21:10:31 +0200
From: Agostino Sarubbo <ago@...too.org>
To: oss-security@...ts.openwall.com
Subject: libav: out-of-bounds stack read

Hello,

I'd like to share the details of a stack-buffer overflow in libav:
https://blogs.gentoo.org/ago/2016/08/20/libav-stack-based-buffer-overflow-in-aac_sync-aac_parser-c/


If you think it is suitable for an identifier, please assign one.
Thanks

-- 
Agostino

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.