Lucene search

K
ubuntuUbuntuUSN-6659-1
HistoryFeb 26, 2024 - 12:00 a.m.

libde265 vulnerabilities

2024-02-2600:00:00
ubuntu.com
13
libde265
video codec
ubuntu
vulnerabilities
denial of service
arbitrary code
cve-2022-43244
cve-2022-43249
cve-2022-43250
cve-2022-47665
cve-2023-25221
cve-2022-43245
cve-2023-24751
cve-2023-24752
cve-2023-24754
cve-2023-24755
cve-2023-24756
cve-2023-24757
cve-2023-24758
memory dereference

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.9%

Releases

  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • libde265 - Open H.265 video codec implementation

Details

It was discovered that libde265 could be made to write out of bounds. If a
user or automated system were tricked into opening a specially crafted
file, an attacker could possibly use this issue to cause a denial of
service or execute arbitrary code. (CVE-2022-43244, CVE-2022-43249,
CVE-2022-43250, CVE-2022-47665, CVE-2023-25221)

It was discovered that libde265 could be made to read out of bounds. If a
user or automated system were tricked into opening a specially crafted
file, an attacker could possibly use this issue to cause a denial of
service. (CVE-2022-43245)

It was discovered that libde265 could be made to dereference invalid
memory. If a user or automated system were tricked into opening a specially
crafted file, an attacker could possibly use this issue to cause a denial
of service. (CVE-2023-24751, CVE-2023-24752, CVE-2023-24754,
CVE-2023-24755, CVE-2023-24756, CVE-2023-24757, CVE-2023-24758)

Rows per page:
1-10 of 221