Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ittiam-systems/libhevc
main @ 1a3c8d6
17
Fixes
0
CVEs
HIGH
Peak severity
43.8%
Coverage
Highlights
Buffer Overflow: 7 prior fixes. Scrutinize any change in this area.
decoder/ihevcd_parse_headers.c: most-fixed (10 issues). Treat as high-risk during review.
17 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: Multiple integer overflows in parsing of syntax elements (delta_chroma_log2_weight_denom, num_long_term_pics, prediction weights, crop offsets) can lead to memory corruption.
Memory Corruption: SPS-triggered reallocation before the first picture is decoded can lead to heap buffer overflow and memory corruption; multiple fixes address this same root cause.
Buffer Overflow: Missing bounds checks on bitstream buffer and array indices in PPS/slice header parsing can cause out-of-bounds reads/writes.