PT-2021-7709 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.8 Description: A stack-buffer-overflow issue exists in the libde265 video codec, specifically in the put epel hv fallback function of the fallback-motion.cc component. This can be exploited by a remote attacker to cause a...

PT-2021-7711 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.8 Description: An issue exists due to a SEGV in slice.cc, related to insufficient access control in the libde265 video codec implementation. This could potentially allow a remote attacker to cause a denial of service...

Heap-based Buffer Overflow in strukturag/libde265

✍️ Description heap-buffer-overflow of decctx.cc in function readspsNAL 🕵️‍♂️ Proof of Concept Verification steps： 1.Get the source code of Bento4 2.Compile the Bento4 bash $ ./autogen.sh $ export CFLAGS="-g -lpthread -fsanitize=address" $ export CXXFLAGS="-g -lpthread -fsanitize=address" $...

PT-2019-6185 · Struktur Ag +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a heap buffer overflow in the mc luma function of the libde265 video codec implementation. This can be exploited by a remote attacker using a specially crafted file, potentially...

PT-2019-6199 · Struktur Ag +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a global buffer overflow in the decode CABAC bit function. This can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service. The...

PT-2019-6201 · Struktur Ag +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a stack buffer overflow in the put qpel fallback function. This can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service...

PT-2019-6203 · Struktur Ag +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a heap buffer overflow fault in the put epel 16 fallback function. This can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service...

PT-2019-6187 · Struktur Ag +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a heap buffer overflow in the put qpel 0 0 fallback 16 function. This can be exploited by a remote attacker using a specially crafted file, potentially leading to a denial of service...

PT-2019-6200 · None +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a heap buffer overflow in the de265 image::available zscan function. This can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service...

PT-2019-6186 · Struktur Ag +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a heap buffer overflow in the put weighted pred avg 16 fallback function of the libde265 video codec implementation. This can be exploited by a remote attacker using a specially...

PT-2019-6198 · None +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: libde265 version v1.0.4 Description: The issue is related to a heap buffer overflow in the put epel hv fallback function, which can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service...

PT-2019-6188 · Struktur Ag +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a segmentation fault in the apply sao internal function, which can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service. The...

PT-2019-6202 · Struktur Ag +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a heap buffer overflow fault in the mm loadl epi64 function, which can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service...

PT-2019-6184 · None +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a heap buffer overflow in the put weighted bipred 16 fallback function of the libde265 video codec implementation. This can be exploited by a remote attacker using a specially crafte...

GLSA-201811-06 : libde265: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201811-06 libde265: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libde265. Please review libde265 changelog referenced below for details. Impact : A remote attacker could entice a user to open a...

libde265: Multiple vulnerabilities

Background Open h.265 video codec implementation. Description Multiple vulnerabilities have been discovered in libde265. Please review libde265 changelog referenced below for details. Impact A remote attacker could entice a user to open a specially crafted media file using libde265 or linked...