Read the docs
TI-2023-30678 Aliases GHSA-3w9w-9833-gcpv

Security bug in ConvertToSinglePlane when used with untrusted content from the DDS loader

Priority LOW 38Published · Updated

Key facts

Attack vector
—
Privileges required
—
User interaction
—
Attack complexity
—
Impact type
—
Confidentiality · integrity · availability
—
Fix status
Fixed

No CVSS vector from any source. Fix status from GitHub.

Summary

### Impact A memory overwrite bug was reported by a security researcher in the **ConvertToSinglePlane** method via the *texconv* command-line tool when given an invalid height for planar video textures such as NV12. This can be a potential security bug for any clients of the library who follow the same pattern. This issue *does not* impact use of the DDS texture loader itself, only when combined with `ConvertToSinglePlane` for converting multi-planar video formats. All other functions in the library fail immediately if given images in planar formats. ### Patches The fix to the specific area as well as general hardening can be found in [this PR](https://github.com/microsoft/DirectXTex/pull/307) and will be included in the This bug has been fixed in the January 31, 2023 or later release of DirectXTex. ### Workarounds If your code makes use of **ConvertToSinglePlane**, you can validate that the width & height alignment requirements are met for the input image before calling the function.

Why it matters now

Fix Fixed directxtex_desktop_2019 (NuGet): 2023.1.31.1directxtex_desktop_win10 (NuGet): 2023.1.31.1+1 more product

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—directxtex_desktop_2019 (NuGet)before 2023.1.31.12023.1.31.1Patch availableGHSA-3w9w-9833-gcpv
—directxtex_desktop_win10 (NuGet)before 2023.1.31.12023.1.31.1Patch availableGHSA-3w9w-9833-gcpv
—directxtex_uwp (NuGet)before 2023.1.31.12023.1.31.1Patch availableGHSA-3w9w-9833-gcpv
  • directxtex_desktop_2019 (NuGet) Vendor— Affected before 2023.1.31.1 Fixed in 2023.1.31.1 Patch available GHSA-3w9w-9833-gcpv
  • directxtex_desktop_win10 (NuGet) Vendor— Affected before 2023.1.31.1 Fixed in 2023.1.31.1 Patch available GHSA-3w9w-9833-gcpv
  • directxtex_uwp (NuGet) Vendor— Affected before 2023.1.31.1 Fixed in 2023.1.31.1 Patch available GHSA-3w9w-9833-gcpv

Remediation

  • Fix · GHSA-3w9w-9833-gcpv directxtex_desktop_2019 (NuGet) Fixed in 2023.1.31.1 Advisory →
  • Fix · GHSA-3w9w-9833-gcpv directxtex_desktop_win10 (NuGet) Fixed in 2023.1.31.1 Advisory →
  • Fix · GHSA-3w9w-9833-gcpv directxtex_uwp (NuGet) Fixed in 2023.1.31.1 Advisory →

Timeline

  1. 2026-10-03 Threatist record created from GHSA-3w9w-9833-gcpv

References

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences