29 matches found
ALPINE-CVE-2026-45383
libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...
ALPINE-CVE-2026-45382
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...
CVE-2026-45383
libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in "decodercontext::decodesliceunitWPP" in "libde265/decctx.cc". When decoding a WPP Wavefront Parallel Processing HEVC slice, "ctbAddrRS" is computed...
CVE-2026-45382
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, "decodercontext::decodesliceunittiles" libde265/decctx.cc:920 reads "pps.CtbAddrRStoTSctbAddrRS" at line 966 where "ctbAddrRS = ctbY ctbsWidth + ctbX" is computed from PPS-supplied "colBd"/"rowBd" arrays...
CVE-2026-45383: Out-of-bounds Read
libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...
CVE-2026-45382: Out-of-bounds Read
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...
ALPINE-CVE-2026-49337
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted sequence of H.265 NAL units causes decodercontext::readsliceNAL libde265/decctx.cc:481 to attach slice headers to a finished picture object that has no active image unit, resulting in...
ALPINE-CVE-2026-49295
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in decodercontext::processreferencepictureset libde265/decctx.cc:1376. The root cause is a missing aggregate bound check on predicted...
CVE-2026-49295
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in "decodercontext::processreferencepictureset" "libde265/decctx.cc:1376". The root cause is a missing aggregate bound check on predicted...
CVE-2026-49337
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted sequence of H.265 NAL units causes "decodercontext::readsliceNAL" "libde265/decctx.cc:481" to attach slice headers to a finished picture object that has no active image unit, resulting in...
CVE-2026-49337: Allocation of Resources Without Limits or Throttling
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted sequence of H.265 NAL units causes decodercontext::readsliceNAL libde265/decctx.cc:481 to attach slice headers to a finished picture object that has no active image unit, resulting in...
CVE-2026-49295: Out-of-bounds Write
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in decodercontext::processreferencepictureset libde265/decctx.cc:1376. The root cause is a missing aggregate bound check on predicted...
CVE-2025-61147
strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decodercontext::computeframedroptable...
CVE-2025-61147
strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decodercontext::computeframedroptable...
CVE-2025-61147: Buffer Copy without Checking Size of Input
strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decodercontext::computeframedroptable...
CVE-2025-61147
strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decodercontext::computeframedroptable...
imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6401129057222656 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
Denial Of Service (DoS)
libde265.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a NULL pointer dereference in the decodercontext::processslicesegmentheader function in decctx.cc which allows an attacker to cause an application crash...