CVE-2024-38950

2024-06-2620:15:16

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-38950

vulnerability

libde265

crash

application

crafted payload

__interceptor_memcpy

unix

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to __interceptor_memcpy function.

OSVersionArchitecturePackageVersionFilename
Debian12alllibde265<= 1.0.11-1+deb12u2libde265_1.0.11-1+deb12u2_all.deb
Debian11alllibde265<= 1.0.11-0+deb11u3libde265_1.0.11-0+deb11u3_all.deb
Debian10alllibde265<= 1.0.3-1libde265_1.0.3-1_all.deb
Debian999alllibde265<= 1.0.15-1libde265_1.0.15-1_all.deb
Debian13alllibde265<= 1.0.15-1libde265_1.0.15-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libde265	<= 1.0.11-1+deb12u2	libde265_1.0.11-1+deb12u2_all.deb
Debian	11	all	libde265	<= 1.0.11-0+deb11u3	libde265_1.0.11-0+deb11u3_all.deb
Debian	10	all	libde265	<= 1.0.3-1	libde265_1.0.3-1_all.deb
Debian	999	all	libde265	<= 1.0.15-1	libde265_1.0.15-1_all.deb
Debian	13	all	libde265	<= 1.0.15-1	libde265_1.0.15-1_all.deb