avcodec/av1dec: check that primary_ref_frame is within range
authorJames Almer <jamrial@gmail.com>
Sun, 3 May 2026 15:58:27 +0000 (12:58 -0300)
committerMichael Niedermayer <michael@niedermayer.cc>
Tue, 5 May 2026 17:27:36 +0000 (19:27 +0200)
commitc3795bf59a414ae3156940e229a14279a2991657
tree8b41f7e705de5650b9ba94f9e7dba95b7bd2ade8
parent26f36be1da2fa18ee816bbc3ada80e84b8de3223
avcodec/av1dec: check that primary_ref_frame is within range

Fixes CVE-2026-30997

Fixes: Out-of-Bounds Access
Found-by: Xinghang Lv
Signed-off-by: James Almer <jamrial@gmail.com>
(cherry picked from commit 1a2c16fe514b60e1860829c42ce199de77a007e5)
(cherry picked from commit 3c4ca300f469d657051c8584515870fe9c36aaa3)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/av1dec.c