Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ittiam-systems/libxaac
main @ b919319
84
Fixes
0
CVEs
CRITICAL
Peak severity
25.6%
Coverage
Highlights
Buffer Overflow: 29 prior fixes. Scrutinize any change in this area.
decoder/ixheaacd_headerdecode.c: most-fixed (6 issues). Treat as high-risk during review.
60 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Buffer Overflow: Multiple fixes address missing bounds checks on CLD/ICC values, output_idx_data, and bs_ttt_bands_low, indicating a persistent pattern of unchecked indices in MPS bitstream parsing that can corrupt global or stack memory.
Integer Overflow: Multiple fixes add saturating arithmetic to AVQ decoding, where unchecked operations on corrupt audio data can lead to out-of-bounds writes; this is a recurring arithmetic-safety hotspot.
Heap Buffer Overflow: Bit-buffer read functions (show_bits, read_2bytes, aac_showbits_32) repeatedly read beyond the buffer end when cnt_bits is negative or exhausted, causing heap overflows; fixes add bounds checks and error propagation.