-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability is a heap-based buffer overflow in af_dialoguenhance.c. The commit 2d9ed64859c9887d0504cd71dbd5b2c15e14251a fixes this vulnerability.
The patch modifies two functions: config_input and de_stereo.
In de_stereo, the memcpy operations were changed to use nb_samples (the minimum of s->overlap and s->in->nb_samples) instead of s->overlap for the size. This directly addresses the over-read mentioned in the vulnerability description (af_dialoguenhance.c:261:5). This makes de_stereo a vulnerable function.
In config_input, the buffer allocation size for several frames was changed from s->fft_size * 4 to (s->fft_size + 2) * 2. This suggests the original allocation might have been insufficient, potentially leading to issues when these buffers are used, including in de_stereo. While not the direct site of the over-read, incorrect buffer sizing can be a contributing factor to buffer overflows. Thus, config_input is also identified as a related function, though with medium confidence as the primary vulnerability lies in de_stereo.