The https://github.com/ImageMagick project is using the oss-fuzz tooling of google and with the attached file there is an integer overflow in `residual_coding`. I suspect that this is caused by returning a negative value in `decode_coeff_abs_level_remaining`.

https://github.com/strukturag/libde265/blob/e587ef6e8000662b91c35ccb866c2374d3a40e27/libde265/slice.cc#L3369

Test file: [test.zip](https://github.com/strukturag/libde265/files/9033582/test.zip)

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48430

Integer-overflow · residual_coding
This is a GitHub Issue
repo:libde265
owner:strukturag
Title : Integer-overflow · residual_coding
Issue date:

--- start body ---
The https://github.com/ImageMagick project is using the oss-fuzz tooling of google and with the attached file there is an integer overflow in `residual_coding`. I suspect that this is caused by returning a negative value in `decode_coeff_abs_level_remaining`.

https://github.com/strukturag/libde265/blob/e587ef6e8000662b91c35ccb866c2374d3a40e27/libde265/slice.cc#L3369

Test file: [test.zip](https://github.com/strukturag/libde265/files/9033582/test.zip)

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48430

--- end body ---

An integer overflow vulnerability in the residual_coding function of libde265 can be exploited via specially crafted input, potentially leading to unexpected behavior or crashes. The issue arises from returning a negative value in decode_coeff_abs_level_remaining, which can cause improper handling of memory or data processing.