Struktur Libde265
60 CVEs affecting Struktur Libde265. Latest disclosed: 2026-06-19. Critical: 1, High: 14.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1253 | Critical | 9.8 | 2022-04-06 | Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd092… |
CVE-2023-49468 | High | 8.8 | 2023-12-07 | Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at slice.cc. |
CVE-2023-49467 | High | 8.8 | 2023-12-07 | Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates function at motion.cc. |
CVE-2023-49465 | High | 8.8 | 2023-12-07 | Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function at motion.cc. |
CVE-2023-27103 | High | 8.8 | 2023-03-15 | Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc. |
CVE-2020-21598 | High | 8.8 | 2021-09-16 | libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file. |
CVE-2023-43887 | High | 8.1 | 2023-11-22 | Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the num_tile_columns and num_tile_row parameters in the function pic_parameter_set::du… |
CVE-2022-47665 | High | 7.8 | 2023-03-03 | Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int) |
CVE-2022-47664 | High | 7.8 | 2023-03-03 | Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse |
CVE-2023-25221 | High | 7.8 | 2023-03-01 | Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function in motion.cc. |
CVE-2022-47655 | High | 7.8 | 2023-01-05 | Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback<unsigned short> |
CVE-2021-36409 | High | 7.8 | 2022-01-10 | There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attackers to cause a Deni… |
CVE-2026-33164 | High | 7.5 | 2026-03-20 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in pic_… |
CVE-2026-49346 | High | 7.1 | 2026-06-19 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit… |
CVE-2026-49295 | High | 7.1 | 2026-06-19 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write i… |
CVE-2024-38950 | Medium | 6.5 | 2024-06-26 | Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to __interceptor_memcpy function. |
CVE-2024-38949 | Medium | 6.5 | 2024-06-26 | Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to display444as420 function at sdl.cc |
CVE-2023-47471 | Medium | 6.5 | 2023-11-16 | Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slice_segment_header function in the… |
CVE-2023-27102 | Medium | 6.5 | 2023-03-15 | Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc. |
CVE-2023-24751 | Medium | 6.5 | 2023-03-01 | libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to cause a De… |