-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability description points to insufficient validation of parameters when parsing Speex codec extradata in avcodec/speexdec.c, leading to potential integer overflows. The provided commit 0895ef0d6d6406ee6cd158fc4d47d80f201b8e9c modifies the parse_speex_extradata function within this file. The patch specifically adds checks to the s->frame_size parameter before it's used in a calculation (s->frame_size <<= (s->mode > 0);, which was previously s->frame_size *= 1 + (s->mode > 0);). This change is explicitly to prevent integer overflows, as stated in the commit message ('Prevent potential integer overflows'). Therefore, the parse_speex_extradata function is identified as the vulnerable function because it processes the input that could lead to an integer overflow without the applied patch.