Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ittiam-systems/libavc
main @ 54eb5b0
51
Fixes
0
CVEs
CRITICAL
Peak severity
23.7%
Coverage
Highlights
Integer Overflow: 17 prior fixes. Scrutinize any change in this area.
decoder: most-fixed (17 issues). Treat as high-risk during review.
46 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: Recurring integer overflows in picture order count (POC), frame number, and display sequence calculations lead to out-of-bounds memory accesses. Multiple fixes required 64-bit promotion and range checks.
Heap Buffer Overflow: SEI message parsing lacked sufficient bitstream bounds checks, leading to heap overflows. Fixed by adding boundary checks and buffer padding.
Heap Buffer Overflow: MVC decoder bitstream buffer sizing was insufficient for lookahead reads and large SEI NAL units, causing heap overflows. Fixed by padding and dynamic reallocation.