CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - 見た目は怖い。StagefrightやPNGのバグ脆弱性をまだ覚えていますか.... CVE-2019-2107では、デコーダ/コーデックがmediacodecユーザーで動作し、適切に「細工された」動画（タイル有効 - pspps-i1tilesenabledflag）により、RCEが可能になる可能性があります。影響を受けるコーデックはHVEC（別名H.265およびMPEG-H Part 2）です。exploit rce android stagefright cve 詳細情報 LineageOS...

Astra Linux – Vulnerability in libde265

libde265 is an open-source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit caused a segmentation fault in the picparameterset::setderivedvalues function. This issue has been fixed in version 1.0.17...

Astra Linux – Vulnerability in libde265

libde265 is an open-source implementation of the h.265 video codec. Prior to version 1.0.17, a crafted HEVC bitstream caused an out-of-bounds heap write, as confirmed by AddressSanitizer. The issue was triggered by a stale ctbinfo.log2unitSize value after a SPS change, where PicWidthInCtbsY and...

The vulnerability of the decodeSliceUnit_WPP() function in the libde265/decctx.cc file of the h.265 video codec implementation by Libde265, which allows a attacker to cause a service failure.

The vulnerability of the decodeSliceUnitWPP function in the libde265/decctx.cc file of the h.265 codec implementation, developed by Libde265, is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the decoder_context::decodeSliceUnitTiles() function in the libde265/decctx.cc implementation of the h.265 video codec Libde265 allows a malicious actor to cause a service failure.

The vulnerability of the decodercontext::decodeSliceUnitTiles function in the libde265/decctx.cc implementation of the h.265 video codec. Libde265 relies on the output of the operation outside the buffer. Exploiting this vulnerability could allow a malicious actor to cause service failure...

[SECURITY] [DSA 6486-1] libde265 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6486-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 06, 2026 https://www.debian.org/security/faq -...

Debian dsa-6486 : libde265-0 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6486 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6486-1 [email protected] https://www.debian.org/securit...

The vulnerability of the process_reference_picture_set() function in the h.265 Libde265 codec implementation allows a attacker to execute arbitrary code.

The vulnerability of the processreferencepictureset function in the h.265 Libde265 codec implementation is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

UBUNTU-CVE-2026-49337

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted sequence of H.265 NAL units causes decodercontext::readsliceNAL libde265/decctx.cc:481 to attach slice headers to a finished picture object that has no active image unit, resulting in...

CVE-2026-53702: Out-of-bounds Write

A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library gst-plugins-bad. When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from cpbcntminus1i the loop index instead of the sub-layer 0 CPB count cpbcntminus10 from the referenced...

Important: libde265

Issue Overview: libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in picparameterset::setderivedvalues. This issue has been patched in version 1.0.17. CVE-2026-33164 libde265 is an open source...

ROS-20250624-12

Vulnerability of putqpelfallback function fallback-motion.cc of h.265 video codec implementation Libde265 is related to writing beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service Vulnerability in the mcchroma function...

[SECURITY] [DLA 4219-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4219-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 17, 2025 https://wiki.debian.org/LTS -...

Debian dla-4219 : gir1.2-gst-plugins-bad-1.0 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4219 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4219-1 [email protected] https://www.debian.org/lts/security/...

Libde265 Security Vulnerability

Structure AG Libde265 is an h.265 video codec from Structure AG, Germany. A security vulnerability exists in Libde265 version v1.0.15, which stems from a buffer overflow issue in the interceptormemcpy function, which could lead to a crash...

The vulnerability of the `put_epel_hv_fallback` function in the `fallback-motion.cc` component of the h.265 Libde265 codec implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putepelhvfallback function in the fallback-motion.cc component of the h.265 Libde265 codec implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service failures...

[SECURITY] [DSA 5346-1] libde265 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5346-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 10, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3280-1] libde265 security update

Debian LTS Advisory DLA-3280-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost January 24, 2023 https://wiki.debian.org/LTS Package : libde265 Version : 1.0.3-1+deb10u2 CVE ID : CVE-2020-21596 CVE-2020-21597 CVE-2020-21598 CVE-2022-43235 CVE-2022-43236 CVE-2022-43237...

Codec H.265 not working in HDX session

H.265 not getting utilized in the HDX session with the below settings: Followed the link: https://docs.citrix.com/en-us/receiver/windows/current-release/improve/h-265-video-encoding.html Studio Policy set: 1. Graphic Status indicator - Disabled 2. Moving Image Compression - Disabled 3. Optimize...