Files
FFmpeg/libavfilter
Michael Niedermayer 107072ee9b avfilter/vf_lut3d: do not compute size*size before the size is validated
parse_dat(), parse_cube(), and parse_cinespace() multiply an untrusted LUT size
before allocate_3dlut() validates it, which can overflow int.
Use the validated lutsize2 computed by allocate_3dlut() instead.

Fixes: signed integer overflow
(cherry picked from commit 92cd5c9781)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2026-08-02 02:47:28 +02:00
..
2026-06-26 02:43:34 +02:00
2026-05-15 20:29:29 +02:00
2026-05-15 20:29:29 +02:00