USN-6617-1: libde265 vulnerabilities

It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and...

The vulnerability of the derivate_spatial_luma_vector_prediction function in the h.265 Libde265 implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the derivatespatiallumavectorprediction function in the h.265 Libde265 codec implementation is related to the possibility of writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, a...

[SECURITY] [DLA 3699-1] libde265 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3699-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 30, 2023 https://wiki.debian.org/LTS -...

CVE-2023-40476

A stack-based buffer overflow was found in the GStreamer Plugins Bad when handling malformed files with H.265 video streams. This issue requires user interaction with the library and may allow a malicious user to cause an integer overflow before allocating the buffer, triggering a crash or code...

Debian: Security Advisory (DLA-3676-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3676-1] libde265 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3676-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky November 30, 2023 https://wiki.debian.org/LTS -...

Important: gstreamer1-plugins-bad-free

Issue Overview: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video NOTE: https://gstreamer.freedesktop.org/security/sa-2023-0006.html NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/mergerequests/5362 NOTE: Fixed by:...

CVE-2023-30467 Improper Authorization Vulnerability in Milesight Network Video Recorder (NVR)

This vulnerability exists in Milesight 4K/H.265 Series NVR models MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC, due to improper authorization at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially...

The vulnerability of the decoder_context::processSliceSegmentHeader function (decctx.cc) in the implementation of the h.265 Libde265 video codec allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the decodercontext::processSliceSegmentHeader function decctx.cc in the H.265 Libde265 video codec implementation is related to pointer swapping errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the `put_epel_hv_fallback` function in the `fallback-motion.cc` component of the h.265 Libde265 codec implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putepelhvfallback function in the fallback-motion.cc component of the h.265 Libde265 codec implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Debian: Security Advisory (DSA-5346-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5346-1] libde265 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5346-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 10, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3280-1] libde265 security update

Debian LTS Advisory DLA-3280-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost January 24, 2023 https://wiki.debian.org/LTS Package : libde265 Version : 1.0.3-1+deb10u2 CVE ID : CVE-2020-21596 CVE-2020-21597 CVE-2020-21598 CVE-2022-43235 CVE-2022-43236 CVE-2022-43237...

[SECURITY] [DLA 3240-1] libde265 security update

Debian LTS Advisory DLA-3240-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 15, 2022 https://wiki.debian.org/LTS Package : libde265 Version : 1.0.3-1+deb10u1 CVE ID : CVE-2020-21599 CVE-2021-35452 CVE-2021-36408 CVE-2021-36409 CVE-2021-36410 CVE-2021-3641...

The vulnerability of the mc_chroma function in the h.265 Libde265 video codec implementation, which allows a hacker to cause a service failure.

The vulnerability of the mcchroma function in the h.265 Libde265 video codec is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

libde265 has an unspecified vulnerability

Libde265 is a German h.265 video codec. libde265 suffers from a security vulnerability that could be exploited by an attacker to cause a denial of service DoS by running a crafted file or application with unspecified other impact...

libde265 resource management error vulnerability

Libde265 is a German h.265 video codec. libde265 suffers from a resource management error vulnerability that stems from a Heap-use-after-free in intrapred.h when decoding files using dec265. No detailed vulnerability details are available...

libde265 Access Control Error Vulnerability (CNVD-2022-19083)

Libde265 is a German h.265 video codec. libde265 is vulnerable to an access control error, and no detailed vulnerability details are currently available...

libde265 Heap Buffer Overflow Vulnerability (CNVD-2021-78434)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 has a heap buffer overflow vulnerability in the putweightedbipred16fallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

libde265 Heap Buffer Overflow Vulnerability (CNVD-2021-79732)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the putqpel00fallback16 function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...