diff --git a/ChangeLog.md b/ChangeLog.md index bd01594c..b9d387a7 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -8,12 +8,13 @@ subsampling, which allows losslessly transposed or rotated 4:1:1 JPEG images to be losslessly cropped, partially decompressed, or decompressed to planar YUV images. -2. Fixed various segfaults and buffer overruns that occurred when attempting to -decompress various specially-crafted malformed 12-bit-per-component lossless -JPEG images. These issues were caused by out-of-range sample values that were -not range-limited before being used as array indices. The issues were specific -to 12-bit data precision, since that is the only data precision for which the -range of the sample data type exceeds the valid sample range. +2. Fixed various segfaults and buffer overruns (CVE-2023-2804) that occurred +when attempting to decompress various specially-crafted malformed +12-bit-per-component lossless JPEG images. These issues were caused by +out-of-range sample values that were not range-limited before being used as +array indices. The issues were specific to 12-bit data precision, since that +is the only data precision for which the range of the sample data type exceeds +the valid sample range. 3. Fixed an oversight in 1.4 beta1[8] that caused various segfaults and buffer overruns when attempting to decompress various specially-crafted malformed