Lucene search
+L

107 matches found

RedhatCVE
RedhatCVE
added 2026/07/22 11:31 a.m.11 views

CVE-2026-45383

A flaw was found in libde265, an open-source implementation of the H.265 video codec. A remote attacker could exploit a heap buffer overflow vulnerability by providing specially crafted video files. This occurs when decoding a Wavefront Parallel Processing WPP HEVC slice, where malformed headers...

6.9CVSS5.6AI score0.00257EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 9:16 p.m.5 views

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

6.9CVSS0.00257EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/21 9:0 p.m.19 views

CVE-2026-45383

CVE-2026-45383 affects libde265 prior to 1.0.19, where a heap-buffer-overflow can occur during HEVC WPP slice decoding. In decoder_context::decode_slice_unit_WPP(), ctbAddrRS is computed as ctbRow*ctbsWidth and, if PPS/SPS headers encode a value that exceeds pps.CtbAddrRStoTS.size(), an out-of-bo...

6.9CVSS5.6AI score0.00257EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/07/21 9:0 p.m.8 views

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

6.9CVSS5.7AI score0.00257EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/21 9:0 p.m.35 views

CVE-2026-45383 libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.18

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

6.9CVSS0.00257EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/07/08 10:36 a.m.4 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fixed integer overflow in sample size validation The wavefrontsendsample function has a problem with integer overflow when validating sample size. The header-size field is of type u32, but it is cast to int for...

6.7AI score0.00184EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/18 1:36 p.m.11 views

CLEANSTART-2026-WG59699 Security fixes for CVE-2024-47535, CVE-2024-47561, CVE-2024-7254, CVE-2025-24970, CVE-2025-25193, CVE-2025-33042, CVE-2025-48924, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42577, ghsa-72hv-8253-57qq applied in versions: 13.9-r0, 13.9-r1, 13.9-r2

Multiple security vulnerabilities affect the wavefront-proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

9.2CVSS7.1AI score0.03256EPSS
SaveExploits10References34
OSV
OSV
added 2026/05/18 1:36 p.m.11 views

CLEANSTART-2026-JW30455 Security fixes for CVE-2024-47535, CVE-2024-47561, CVE-2024-7254, CVE-2025-24970, CVE-2025-25193, CVE-2025-33042, CVE-2025-48924, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2026-41417, CVE-2026-42577, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-pwqr-wmgm-9rr8, ghsa-w9fj-cfpg-grvv applied in versions: 13.7-r0, 13.7-r1, 13.7-r2, 13.9-r0

Multiple security vulnerabilities affect the wavefront-proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

9.2CVSS7AI score0.03256EPSS
SaveExploits9References35
OSV
OSV
added 2026/05/18 1:36 p.m.22 views

CLEANSTART-2026-MM00120 Security fixes for CVE-2024-47535, CVE-2024-47561, CVE-2024-7254, CVE-2025-24970, CVE-2025-25193, CVE-2025-33042, CVE-2025-48924, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2026-41417, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-pwqr-wmgm-9rr8, ghsa-w9fj-cfpg-grvv applied in versions: 13.8-r0, 13.9-r0

Multiple security vulnerabilities affect the wavefront-proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

9.2CVSS7AI score0.03256EPSS
SaveExploits9References33
Chainguard
Chainguard
added 2026/04/11 2:18 a.m.17 views

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: pluto, google-cloud-otel-ops-collector, crossplane-provider-aws-ssm-fips, tempo, newrelic-infrastructure-agent, falco-no-driver, dockerize, harbor-cli, crossplane-function-auto-ready, bento, spiffe-helper, flannel-fips, kubeflow-fips, quic-go, q, trivy-fips,...

7.5CVSS7.2AI score0.00621EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/04/11 2:18 a.m.7 views

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: pluto, google-cloud-otel-ops-collector, crossplane-provider-aws-ssm-fips, tempo, newrelic-infrastructure-agent, falco-no-driver, dockerize, harbor-cli, crossplane-function-auto-ready, bento, spiffe-helper, flannel-fips, kubeflow-fips, quic-go, kubeflow-katib, q,...

5.4AI score
SaveExploits0
Chainguard
Chainguard
added 2026/04/11 2:18 a.m.72 views

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: pluto, tempo, dockerize, kubeflow-fips, trivy-fips, rabbitmq-default-user-credential-updater-fips, chisel, json-exporter, xcover, terraform-docs, tetragon-fips, sbom-convert, nova, external-dns-fips, nerdctl, apko-fips, cloud-provider-azure, cilium-certgen, nri-mssql...

5.4AI score
SaveExploits0
Chainguard
Chainguard
added 2026/03/10 1:17 p.m.14 views

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: pluto, google-cloud-otel-ops-collector, tempo, newrelic-infrastructure-agent, cloudflared, falco-no-driver, crossplane-function-auto-ready, librechat, spiffe-helper, flannel-fips, kubeflow-fips, quic-go, kubeflow-katib, q, trivy-fips,...

7.5CVSS7.6AI score0.00728EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/02/20 1:48 p.m.8 views

CVE-2025-33042 vulnerabilities

Vulnerabilities for packages: druid, logstash, celeborn, apache-pulsar, spark, wavefront-proxy, akhq...

7.3CVSS7.2AI score0.00602EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/02/20 1:48 p.m.7 views

GHSA-RP46-R563-JRC7 vulnerabilities

Vulnerabilities for packages: druid, logstash, celeborn, apache-pulsar, spark, wavefront-proxy, akhq...

5.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/25 4:5 p.m.11 views

CVE-2025-68344

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample size validation The wavefrontsendsample function has an integer overflow issue when validating sample size. The header-size field is u32 but gets cast to int for comparison with...

6.1AI score0.00184EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/12/25 12:24 a.m.4 views

SUSE CVE-2025-68344

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample size validation The wavefrontsendsample function has an integer overflow issue when validating sample size. The header-size field is u32 but gets cast to int for comparison with...

6.6CVSS6.9AI score0.00184EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/12/24 12:30 p.m.5 views

EUVD-2025-205110

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample size validation The wavefrontsendsample function has an integer overflow issue when validating sample size. The header-size field is u32 but gets cast to int for comparison with...

6.3AI score0.00184EPSS
SaveExploits0References5
NVD
NVD
added 2025/12/24 11:15 a.m.14 views

CVE-2025-68344

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample size validation The wavefrontsendsample function has an integer overflow issue when validating sample size. The header-size field is u32 but gets cast to int for comparison with...

0.00184EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2025/12/24 11:15 a.m.5 views

CVE-2025-68344

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample size validation The wavefrontsendsample function has an integer overflow issue when validating sample size. The header-size field is u32 but gets cast to int for comparison with...

7AI score0.00184EPSS
SaveExploits0References35
Rows per page
Query Builder