Libde265 vulnerabilities

3 known vulnerabilities in Libde265 from Struktur. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Libde265: Out-of-bounds Write

  CVE-2023-49467Dec 7, 2023Struktur

  Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates function at motion.cc.

• 8.1 High severity

  Libde265: Buffer Copy without Checking Size of Input

  CVE-2023-43887Nov 22, 2023Struktur

  Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the num_tile_columns and num_tile_row parameters in the function pic_parameter_set::dump.

• 9.8 Critical severity

  strukturag/libde265: Out-of-bounds Write

  CVE-2022-1253Apr 6, 2022StrukturagEPSS 2.05%

  Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.