CVE-2023-25221

CVE-2023-25221 affects libde265 v1.0.10, with a heap-buffer-overflow in derive_spatial_luma_vector_prediction (motion.cc). The vulnerability is tracked across multiple advisories and Debian notes, with the issue fixed in libde265-1.0.11 (per Debian DLA-3352-1) and showcased in Mageia's update to ...

CVE-2023-25221: Out-of-bounds Write

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

libde265 代码问题漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in libde265 version v1.0.10, which stems from a NULL pointer dereference issue found in the ffhevcputunweightedpred8sse method of the sse-motion.cc file...

CVE-2023-24755

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the putweightedpred8fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input file...

CVE-2023-24752: NULL Pointer Dereference

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ffhevcputhevcepelpixels8sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input file...

Denial Of Service (DoS)

libde265 is vulnerable to denial of service. The vulnerability exists due to the heap buffer overflow in the de265image::availablezscan function, allowing an attacker to cause an application crash through the maliciously crafted file...

Debian: Security Advisory (DSA-5346-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

libde265 is vulnerable to Denial Of Service DoS. The vulnerability exists due to the segmentation fault in the applysaointernal function, allowing an attacker to cause an application crash through the maliciously crafted file...

Denial Of Service (DoS)

libde265 is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the putqpel00fallback16 function, allowing an attacker to cause an application crash through the maliciously crafted file...

Denial Of Service (DoS)

libde265 is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack buffer overflow in the putqpelfallback function, allowing an attacker to cause an application crash through the maliciously crafted file...

Debian DSA-5346-1 : libde265 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5346 advisory. Multiple security issues were discovered in libde265, an implementation of the H.265 video codec which may result in denial of service and potentially the executi...

[SECURITY] [DSA 5346-1] libde265 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5346-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 10, 2023 https://www.debian.org/security/faq -...

DSA-5346-1 libde265 - security update

Bulletin has no description...

PT-2023-4440 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.10 Description: The issue is related to a heap-buffer-overflow vulnerability in the derive spatial luma vector prediction function in motion.cc of the Libde265 video codec implementation. This vulnerability can be exploit...

PT-2023-1848 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.10 Description: The issue is related to a NULL pointer dereference in the ff hevc put weighted pred avg 8 sse function at sse-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted input file. The...

PT-2023-1851 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.10 Description: The issue is related to a NULL pointer dereference in the ff hevc put unweighted pred 8 sse function at sse-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted input file...

PT-2023-1852 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.10 Description: The issue is related to a NULL pointer dereference in the put weighted pred 8 fallback function at fallback-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted input file...

PT-2023-1849

Name of the Vulnerable Software and Affected Versions libde265 version 1.0.10 Description The issue is related to a NULL pointer dereference in the put unweighted pred 16 fallback function at fallback-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted input file...

PT-2023-1846 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.10 Description: The issue is related to a NULL pointer dereference in the mc chroma function at motion.cc in the libde265 video codec implementation. This allows an attacker to cause a Denial of Service DoS via a crafted...

PT-2023-1847 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.10 Description: The issue is related to a NULL pointer dereference in the ff hevc put hevc epel pixels 8 sse function at sse-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted input file...