CVE-2026-54241 libde265: SAO sequential filter heap buffer overflow via signed integer overflow

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

EUVD-2026-76759

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

CVE-2026-54241 libde265: SAO sequential filter heap buffer overflow via signed integer overflow

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

CVE-2026-54241

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

CVE-2026-54240 libde265: Pixel accessor signed integer overflow causes heap OOB read/write

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

CVE-2026-54240 libde265: Pixel accessor signed integer overflow causes heap OOB read/write

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

CVE-2026-54240

libde265 , an open-source H.265/HEVC video codec library, is affected by a signed integer overflow in its pixel accessor. Versions prior to 1.1.1 use signed 32-bit arithmetic to compute pixel offsets; a crafted HEVC stream with large image dimensions can overflow this value, causing out-of-bounds...

EUVD-2026-76760

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

CVE-2026-54240 libde265: Pixel accessor signed integer overflow causes heap OOB read/write

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

CVE-2026-54240

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

ROOT-OS-DEBIAN-11-CVE-2026-45383 CVE-2026-45383 in libde265 - Patched by Root

Root has patched CVE-2026-45383 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-49346 CVE-2026-49346 in libde265 - Patched by Root

Root has patched CVE-2026-49346 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-45382 CVE-2026-45382 in libde265 - Patched by Root

Root has patched CVE-2026-45382 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-54241 CVE-2026-54241 in libde265 - Patched by Root

Root has patched CVE-2026-54241 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-49295 CVE-2026-49295 in libde265 - Patched by Root

Root has patched CVE-2026-49295 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-49337 CVE-2026-49337 in libde265 - Patched by Root

Root has patched CVE-2026-49337 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-54240 CVE-2026-54240 in libde265 - Patched by Root

Root has patched CVE-2026-54240 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-38950 CVE-2024-38950 in libde265 - Patched by Root

Root has patched CVE-2024-38950 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-54241: Heap-based Buffer Overflow

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

The vulnerability of the decoder_context::decodeSliceUnitTiles() function in the libde265/decctx.cc implementation of the h.265 video codec Libde265 allows a malicious actor to cause a service failure.

The vulnerability of the decodercontext::decodeSliceUnitTiles function in the libde265/decctx.cc implementation of the h.265 video codec. Libde265 relies on the output of the operation outside the buffer. Exploiting this vulnerability could allow a malicious actor to cause service failure...