ROOT-OS-DEBIAN-13-CVE-2026-49346 CVE-2026-49346 in libde265 - Patched by Root

Root has patched CVE-2026-49346 in the libde265 package for Root:Debian:13. Multiple fixed versions available...

ROS-20260824-73-0022

The vulnerability in libde265 is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROOT-OS-DEBIAN-11-CVE-2023-51792 CVE-2023-51792 in libde265 - Patched by Root

Root has patched CVE-2023-51792 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

ROS-20260819-73-0040

The vulnerability in libde265 is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

[SECURITY] [DSA 6413-1] libde265 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6413-1 [email protected] https://www.debian.org/security/ Aron Xu August 06, 2026 https://www.debian.org/security/faq -...

Debian dsa-6413 : libde265-0 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6413 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6413-1 [email protected] https://www.debian.org/securit...

The vulnerability of the h.265 Libde265 implementation lies in its ability to allow unlimited resource distribution, which enables attackers to cause service failures.

The vulnerability of the h.265 Libde265 implementation is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260729-73-0009

The vulnerability in libde265 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260729-73-0010

The vulnerability in libde265 is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

JLSEC-2026-789 A malicious h.265 bitstream can cause an out-of-bounds write in libde265

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in decodercontext::processreferencepictureset libde265/decctx.cc:1376. The root cause is a missing aggregate bound check on predicted...

PT-2026-67689

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit depth causes a signed integer overflow in de265 image get buffer libde265/image.cc:128. The overflow wraps the plane allocation size to a...

PT-2026-67688

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in decoder context::process reference picture set libde265/decctx.cc:1376. The root cause is a missing aggregate bound check on predicted...

CVE-2026-45382

A flaw was found in libde265, an open-source implementation of the H.265 video codec. A remote attacker could exploit this by providing a malformed H.265 video stream. Processing this malformed data can lead to a heap-buffer-overflow read, which may cause a denial of service DoS by crashing the...

CVE-2026-45383

A flaw was found in libde265, an open-source implementation of the H.265 video codec. A remote attacker could exploit a heap buffer overflow vulnerability by providing specially crafted video files. This occurs when decoding a Wavefront Parallel Processing WPP HEVC slice, where malformed headers...

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

CVE-2026-45382

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

CVE-2026-45383 libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.18

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

CVE-2026-45383

CVE-2026-45383 affects libde265 prior to 1.0.19, where a heap-buffer-overflow can occur during HEVC WPP slice decoding. In decoder_context::decode_slice_unit_WPP(), ctbAddrRS is computed as ctbRow*ctbsWidth and, if PPS/SPS headers encode a value that exceeds pps.CtbAddrRStoTS.size(), an out-of-bo...

CVE-2026-45383 libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.18

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...