{"id":"GHSA-3w9w-9833-gcpv","aliases":[],"url":"https://o3.security/vulnerability/GHSA-3w9w-9833-gcpv","summary":"Security bug in ConvertToSinglePlane when used with untrusted content from the DDS loader","details":"### Impact\nA memory overwrite bug was reported by a security researcher in the **ConvertToSinglePlane** method via the *texconv* command-line tool when given an invalid height for planar video textures such as NV12. This can be a potential security bug for any clients of the library who follow the same pattern.\n\nThis issue *does not* impact use of the DDS texture loader itself, only when combined with `ConvertToSinglePlane` for converting multi-planar video formats. All other functions in the library fail immediately if given images in planar formats.\n\n### Patches\nThe fix to the specific area as well as general hardening can be found in [this PR](https://github.com/microsoft/DirectXTex/pull/307) and will be included in the This bug has been fixed in the January 31, 2023 or later release of DirectXTex.\n\n### Workarounds\nIf your code makes use of **ConvertToSinglePlane**, you can validate that the width & height alignment requirements are met for the input image before calling the function.\n","published":"2023-01-26T19:52:50Z","modified":"2024-12-04T05:41:30.914332Z","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"NuGet","name":"directxtex_desktop_2019","fixedVersion":"2023.1.31.1"},{"ecosystem":"NuGet","name":"directxtex_desktop_win10","fixedVersion":"2023.1.31.1"},{"ecosystem":"NuGet","name":"directxtex_uwp","fixedVersion":"2023.1.31.1"}],"fix":{"url":"https://github.com/microsoft/DirectXTex/pull/307","label":"microsoft/DirectXTex#307"},"references":[{"type":"WEB","url":"https://github.com/microsoft/DirectXTex/security/advisories/GHSA-3w9w-9833-gcpv"},{"type":"WEB","url":"https://github.com/microsoft/DirectXTex/pull/307"},{"type":"PACKAGE","url":"https://github.com/microsoft/DirectXTex"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-12-04T05:41:30.914332Z"}}