Bug 864433 (CVE-2022-37416)

Summary:	media-libs/libmpeg2: buffer overflow in impeg2_mc_fullx_fully_8x8
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	minor	CC:	media-video
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://issuetracker.google.com/issues/231026247
Whiteboard:	B3 [ebuild]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2022-08-08 16:22:08 UTC

CVE-2022-37416:

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fully_8x8.

Patch: https://android-review.googlesource.com/c/platform/external/libmpeg2/+/2132593
Not sure if this has been upstreamed.