diff --git a/libavcodec/exr.c b/libavcodec/exr.c index 8dbe9e2696..6bbd77d8ca 100644 --- a/libavcodec/exr.c +++ b/libavcodec/exr.c @@ -1530,6 +1530,7 @@ static int decode_header(EXRContext *s, AVFrame *frame) ymax = bytestream2_get_le32(&s->gb); if (xmin > xmax || ymin > ymax || + ymax == INT_MAX || xmax == INT_MAX || (unsigned)xmax - xmin >= INT_MAX || (unsigned)ymax - ymin >= INT_MAX) { ret = AVERROR_INVALIDDATA;