Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-126 Medium 6.5

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications...

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Packages
libavif_jll < 1.3.0+0
Upstream
CVE-2025-48175 GHSA-44mp-2g68-7wvv EUVD-2025-15403

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.

References