Description
OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
aswf OpenAPV
Default version status: unaffected
0 to < 1.1.1.0affected
References
- https://github.com/AcademySoftwareFoundation/openapv/issues/219 ↗
- https://github.com/AcademySoftwareFoundation/openapv/tree/kp_handling_issues_20260713 ↗
- https://github.com/AcademySoftwareFoundation/openapv/commit/b5cc54bc786040ba3ac54020e7320e0add51e107 ↗
- https://github.com/AcademySoftwareFoundation/openapv/compare/v0.3.0.0...v1.1.1.0 ↗
- https://github.com/AcademySoftwareFoundation/openapv/pull/226 ↗
- https://aswf.io ↗