← WebKit Silent-Fix Report — 2026-W21
53c3a3a59a vp9_scale_references: fail if no free buffer is available (Potential 'overflow' issue committed to upstream libwebrtc)
severity low
class OOB
confidence 0.55
libvpx VP9 encoder (WebRTC)
Primitive: INVALID_IDX used as frame-buffer index when no free buffer
Triage note: Prevents using an out-of-range/invalid buffer index (and adds scaled-ref dimension asserts); an out-of-bounds hazard in the media encoder path.
Triage note: Prevents using an out-of-range/invalid buffer index (and adds scaled-ref dimension asserts); an out-of-bounds hazard in the media encoder path.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…