Approved changes feed: RSS · Atom

cpe:2.3:a:xiph:theora:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorXiph (732078b2-c4b9-5a7b-8ef7-5b937ffeb754)
ProductTheora (5afffffb-e0bf-5296-93fb-35621c08ac58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/xiph/theora purl2cpe 2026-06-01 10:13:42.857693
pkg:gitlab/xiph/theora purl2cpe 2026-06-01 10:13:42.857695

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-56431 vulnerable 2026-06-08 06:54:17.823483 Details available
oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.
Published: 2024-12-25T00:00:00.000Z
Updated: 2025-05-07T19:45:58.528Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.