{"id":"CVE-2024-56431","aliases":["DEBIAN-CVE-2024-56431","EUVD-2024-53141","GHSA-8xp8-gmmj-xc8w","OESA-2025-1369","SUSE-SU-2025:1287-1","SUSE-SU-2025:1288-1","SUSE-SU-2025:1340-1","SUSE-SU-2025:1365-1","UBUNTU-CVE-2024-56431","openSUSE-SU-2025:0147-1","openSUSE-SU-2025:14957-1","openSUSE-SU-2025:15002-1","openSUSE-SU-2025:15009-1"],"status":"disputed","title":"oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid...","description":"oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.01841,"percentile":0.79273,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-863"],"published":"2024-12-25T00:00:00Z","modified":"2026-11-02T12:03:15Z","exploits":[{"source":"pocgithub","id":"UnionTech-Software/libtheora-CVE-2024-56431-PoC","title":"UnionTech-Software/libtheora-CVE-2024-56431-PoC","date":"2024-12-25","url":"https://github.com/UnionTech-Software/libtheora-CVE-2024-56431-PoC"}],"fixes":[{"ecosystem":"Debian:13","package":"libtheora","fixed_in":["1.2.0~alpha1+dfsg-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libtheora","fixed_in":["1.2.0~alpha1+dfsg-6"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libtheora","fixed_in":["1.1.1-25.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"libtheora","fixed_in":["1.1.1-26.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libtheora","fixed_in":["1.1.1-26.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"libtheora","fixed_in":["1.1.1-28.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"libtheora","fixed_in":["1.1.1-28.oe2403sp1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"mozjs52","fixed_in":["52.6.0-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"mozjs52","fixed_in":["52.6.0-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"mozjs78","fixed_in":["78.15.0-150400.3.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"mozjs78","fixed_in":["78.15.0-150400.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"mozjs115","fixed_in":["115.4.0-150600.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"mozjs115","fixed_in":["115.4.0-150600.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"mozjs60","fixed_in":["60.9.0-150200.6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"mozjs60","fixed_in":["60.9.0-150200.6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"mozjs60","fixed_in":["60.9.0-150200.6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"mozjs60","fixed_in":["60.9.0-150200.6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"mozjs60","fixed_in":["60.9.0-150200.6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"mozjs60","fixed_in":["60.9.0-150200.6.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"mozjs60","fixed_in":["60.9.0-150200.6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP6","package":"mozjs102","fixed_in":["102.15.1-bp156.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"mozjs102","fixed_in":["102.15.1-bp156.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"mozjs115","fixed_in":["115.15.0-5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"mozjs128","fixed_in":["128.9.0-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:13","package":"libtheora","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0~alpha1+dfsg-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libtheora","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0~alpha1+dfsg-6"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libtheora","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-25.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libtheora","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-26.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libtheora","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-26.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libtheora","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-28.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libtheora","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-28.oe2403sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.15.0-150400.3.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.15.0-150400.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.4.0-150600.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.4.0-150600.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"mozjs60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.9.0-150200.6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"mozjs60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.9.0-150200.6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"mozjs60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.9.0-150200.6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"mozjs60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.9.0-150200.6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"mozjs60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.9.0-150200.6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"mozjs60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.9.0-150200.6.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"mozjs60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.9.0-150200.6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.1-bp156.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.1-bp156.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libtheora","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.15.0-5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mozjs128","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.9.0-2.1"}]}]}],"products":[{"vendor":"xiph","product":"theora"}],"references":[{"url":"https://github.com/xiph/theora/issues/17#issuecomment-2480630603","tags":["Issue Tracking","report"]},{"url":"https://github.com/xiph/theora/blob/7180717276af1ebc7da15c83162d6c5d6203aabf/lib/huffdec.c#L193","tags":["Product","web","report"]},{"url":"https://github.com/UnionTech-Software/libtheora-CVE-2024-56431-PoC","tags":["Exploit","package","report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/04/25/6","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/25/4","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/25/6","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56431","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8xp8-gmmj-xc8w","tags":["report"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56431.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-56431","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1369","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251287-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234837","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56431","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251288-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251340-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251365-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-56431","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56431","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3WCFOTADKX35CGXEBFG7GRNA56ZXL5MJ/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14633","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/THV3WO4OWVMUIRYJ7ZUPWCJPSRV3VUQT/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-56431","description":"oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.","status":"disputed","published":"2024-12-25T00:00:00Z","modified":"2025-05-07T19:45:58.528Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:33:57.983942Z"}],"euvd":[{"id":"EUVD-2024-53141","description":"oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.","status":"published","published":"2024-12-25T00:00:00Z","modified":"2025-05-07T19:45:58Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:52.670412Z"}],"ghsa":[{"id":"GHSA-8xp8-gmmj-xc8w","title":"oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid...","description":"oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift.","status":"published","published":"2024-12-25T18:30:45Z","modified":"2025-04-25T21:31:32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:02:02.261137Z"}],"nvd":[{"id":"CVE-2024-56431","description":"oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.","status":"disputed","published":"2024-12-25T17:15:05.51Z","modified":"2026-06-17T08:12:10.747Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:10:41.091507Z"}],"osv":[{"id":"CVE-2024-56431","description":"oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.","status":"published","published":"2024-12-25T00:00:00Z","modified":"2026-10-28T10:54:55.162787673Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:44.777182Z"},{"id":"DEBIAN-CVE-2024-56431","description":"oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.","status":"published","published":"2024-12-25T17:15:05.51Z","modified":"2026-11-02T12:03:15.492874054Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:44.429177Z"},{"id":"OESA-2025-1369","title":"libtheora security update","description":"Theora is a free and open video compression format from the Xiph.org Foundation. Like all our multimedia technology it can be used to distribute film and video online and on disc without the licensing and royalty fees or vendor lock-in associated with other formats.\r\n\r\nSecurity Fix(es):\n\noc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift.(CVE-2024-56431)","status":"published","published":"2025-04-03T11:08:28Z","modified":"2026-08-18T01:17:51.334987839Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2024-56431","description":"oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.","status":"withdrawn","published":"2024-12-25T17:15:00Z","modified":"2025-07-16T07:21:12.427166Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:15.331356Z"},{"id":"openSUSE-SU-2025:0147-1","title":"Security update for mozjs102","description":"\nThis update for mozjs102 fixes the following issue:\n\n- CVE-2024-56431: avoid negative shift in huffdec.c (bsc#1234837).","status":"published","published":"2025-05-09T08:01:38Z","modified":"2026-03-23T04:53:10.007505Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14957-1","title":"libtheora-devel-1.2.0-1.1 on GA media","description":"These are all security issues fixed in the libtheora-devel-1.2.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-02T00:00:00Z","modified":"2026-02-04T03:39:47.107101Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15002-1","title":"libmozjs-115-0-115.15.0-5.1 on GA media","description":"These are all security issues fixed in the libmozjs-115-0-115.15.0-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-16T00:00:00Z","modified":"2026-02-04T03:40:10.958217Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15009-1","title":"libmozjs-128-0-128.9.0-2.1 on GA media","description":"These are all security issues fixed in the libmozjs-128-0-128.9.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-17T00:00:00Z","modified":"2026-02-04T03:38:06.241266Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:1287-1","title":"Security update for mozjs52","description":"This update for mozjs52 fixes the following issues:\n\n- CVE-2024-56431: Fixed a negative shift in huffdec.c (bsc#1234837).\n","status":"published","published":"2025-04-15T16:25:07Z","modified":"2026-02-04T03:25:20.608356Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1288-1","title":"Security update for mozjs52","description":"This update for mozjs52 fixes the following issues:\n\n- CVE-2024-56431: Fixed a negative shift in huffdec.c (bsc#1234837).\n","status":"published","published":"2025-04-15T16:25:29Z","modified":"2026-02-04T03:23:14.238594Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1340-1","title":"Security update for mozjs52","description":"This update for mozjs52 fixes the following issues:\n\n- CVE-2024-56431: Fixed a negative shift in huffdec.c (bsc#1234837).\n","status":"published","published":"2025-04-17T11:45:47Z","modified":"2026-02-04T02:28:39.770109Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1365-1","title":"Security update for mozjs60","description":"This update for mozjs60 fixes the following issues:\n\n- CVE-2024-56431: Fixed a negative shift in huffdec.c (bsc#1234837).\n","status":"published","published":"2025-04-24T12:07:30Z","modified":"2026-02-04T02:50:27.138018Z","updated_at":"2026-11-02T15:53:59.381172Z"}]}}