PT-2026-72179

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mtd: mchp23k256 driver where chip capacity information is stored in both the Open Firmware OF match table and the SPI id table. The probe process uses the of devic...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the decodesliceunittiles process. An attacker can cause a heap buffer over-read by supplying a malformed PPS with tile geometry inconsistent with the SPS, leading to out-of-bounds memory access during decoding...

EUVD-2026-46428

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

CVE-2026-45382

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

PT-2026-57347

Name of the Vulnerable Software and Affected Versions libde265 versions prior to 1.0.19 Description An issue exists in the decoder context::decode slice unit tiles function where the software reads pps.CtbAddrRStoTSctbAddrRS without validating the result against the size of the array. A malformed...