Debian dla-4789 : libde265-0 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4789 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4789-1 [email protected]...

PT-2026-67689

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit depth causes a signed integer overflow in de265 image get buffer libde265/image.cc:128. The overflow wraps the plane allocation size to a...

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in "decodercontext::decodesliceunitWPP" in "libde265/decctx.cc". When decoding a WPP Wavefront Parallel Processing HEVC slice, "ctbAddrRS" is computed...

CVE-2026-45382: Out-of-bounds Read

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

USN-6627-1: libde265 vulnerabilities

It was discovered that libde265 could be made to read out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. CVE-2021-35452, CVE-2021-36411, CVE-2022-43238, CVE-2022-43241,...

USN-6617-1: libde265 vulnerabilities

It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and...

Debian: Security Advisory (DLA-3676-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3676-1] libde265 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3676-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky November 30, 2023 https://wiki.debian.org/LTS -...

PT-2022-6510

Name of the Vulnerable Software and Affected Versions Libde265 version 1.0.9 Description The issue is related to a buffer overflow in the ff hevc put hevc qpel pixels 8 sse function of the Libde265 h.265 video codec implementation. This vulnerability is caused by copying a buffer without checking...

libde265 Heap Buffer Overflow Vulnerability (CNVD-2021-78429)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the mcchroma function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

libde265 Heap Buffer Overflow Vulnerability

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the putepel16fallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

libde265 Heap Buffer Overflow Vulnerability (CNVD-2021-78434)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 has a heap buffer overflow vulnerability in the putweightedbipred16fallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

libde265 Heap Buffer Overflow Vulnerability (CNVD-2021-78432)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the putweightedpredavg16fallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

libde265 heap buffer overflow vulnerability (CNVD-2021-78426)

libde265 is an open source implementation of the h.265 video codec. A heap buffer overflow vulnerability exists in the putepelhvfallback function in libde265 version 1.0.4. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

libde265 Heap Buffer Overflow Vulnerability (CNVD-2021-78431)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the de265image::availablezscan function. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...