AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c.
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://bugs.chromium.org/p/aomedia/issues/detail?id=2914 | third party advisory exploit |
https://security.gentoo.org/glsa/202401-32 | vendor advisory |