| शीर्षक | Ogre3D Ogre v14.4.1 / master commit f629d22 Heap-based Buffer Overflow |
|---|
| विवरण | The crash occurs because malformed image input can cause STB to decode into a pixel buffer that is smaller than required. Ogre’s STBIImageCodec::encode() passes this undersized buffer directly to stbi_write_png_to_mem without validating its size. Inside that function, stbiw__encode_png_line assumes the buffer is at least rowSpan * height bytes and reads width * channels bytes per row (plus neighbors for filters). When the buffer is shorter, it triggers out-of-bounds reads, leading to a heap-buffer-overflow. |
|---|
| स्रोत | ⚠️ https://github.com/OGRECave/ogre/issues/3445 |
|---|
| उपयोगकर्ता | sand (UID 90194) |
|---|
| सबमिशन | 15/09/2025 05:32 AM (11 महीनों पहले) |
|---|
| संयम | 26/09/2025 08:40 AM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 325957 [OGRECave Ogre तक 14.4.1 Image OgreSTBICodec.cpp STBIImageCodec::encode बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|