CVE-2022-43243

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ffhevcputweightedpredavg8sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

Libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.8, which originates from mcluma in motion.cc contains a heap buffer overflow that can be exploited by an attacker to cause a denial of service DoS via a crafted video file...

CVE-2022-43237

Libde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via void putepelhvfallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

CVE-2022-43242

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mcluma in motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

Libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.8, which originates from ffhevcputhevcqpelh2v1sse in sse-motion.cc contains a stack buffer overflow, which can be exploited by an attacker to cause a denial of service DoS via a crafted video file...

CVE-2022-43242

Libde265 v1.0.8 contains a heap-buffer-overflow in mc_luma (motion.cc), enabling DoS via a crafted video file (CVE-2022-43242). Affects libde265 (H.265 codec). Remediation: upgrade to libde265 1.0.11 or newer (per Debian/Ubuntu Gentoo advisories and related disclosures).

CVE-2022-43249

Libde265 1.0.8 contains a heap-buffer-overflow in put_epel_hv_fallback (fallback-motion.cc), enabling DoS via a crafted video file. Affected software/version: libde265 v1.0.8. Root cause and impact are as described in multiple connected advisories, which consistently cite Denial of Service when p...

CVE-2022-43245

CVE-2022-43245 affects libde265 v1.0.8 and is a segmentation fault in apply_sao_internal (sao.cc) that enables Denial of Service via a crafted video file. Public documents tie this to multiple distributions and advisories (Debian DSA 5346-1, USN/LTS notes, Gentoo GLSA, AstraLinux, Alpine Linux, F...

CVE-2022-43235

CVE-2022-43235 — libde265 heap-buffer-overflow . Libde265 v1.0.8 contains a heap-buffer-overflow in the function set by ff_hevc_put_hevc_epel_pixels_8_sse (sse-motion.cc), which can cause a Denial of Service when processing a crafted video file. The vulnerability is reported across multiple advis...

CVE-2022-43253

CVE-2022-43253 affects Libde265 v1.0.8 and describes a heap-buffer-overflow in fallback-motion.cc: put_unweighted_pred_16_fallback, leading to Denial of Service via a crafted video file. Connected sources corroborate the same issue across multiple advisories and trackers. Public details specify t...

CVE-2022-43244

Libde265 v1.0.8 contains a heap-buffer-overflow vulnerability via put_qpel_fallback in fallback-motion.cc, enabling DoS through a crafted video file. Affected component: libde265 (H.265 codec). Root cause: heap-buffer overflow in fallback-motion.cc. Impact: Denial of Service; no exploitation deta...

CVE-2022-43243

Libde265 v1.0.8 contains a heap-buffer-overflow via ff_hevc_put_weighted_pred_avg_8_sse in sse-motion.cc, enabling Denial of Service with a crafted video file. Multiple connected advisories document this CVE and recommend upgrading libde265 to fixed releases (e.g., through Debian/DLA-3280-1, Clou...

CVE-2022-43241

CVE-2022-43241 affects Libde265 v1.0.8 and is described as an unknown crash via ff_hevc_put_hevc_qpel_v_3_8_sse in sse-motion.cc, enabling Denial of Service through a crafted video file. Technical details across connected docs confirm the vulnerability is tied to the H.265 libde265 implementation...

CVE-2022-43237

Libde265 v1.0.8 contains a stack-buffer-overflow via void put_epel_hv_fallback in fallback-motion.cc, enabling DoS via a crafted video file. Evidence appears in multiple advisories (Debian DSA 5346-1; Cloud Foundry USN-6627-1; Gentoo GLSA 202408-20) and in Astra/FreeBSD security notes. Remediatio...

CVE-2022-43238

CVE-2022-43238 affects Libde265 v1.0.8 and is due to an unknown crash in ff_hevc_put_hevc_qpel_h_3_v_3_sse within sse-motion.cc, allowing DoS via a crafted video file. Public advisoriesconfirm a DoS impact; several vendors advise upgrading. Remediation (examples): upgrade to libde265 1.0.11+ (Deb...

CVE-2022-43239

CVE-2022-43239 affects libde265 v1.0.8, where a heap-buffer-overflow in mc_chroma (motion.cc) can cause Denial of Service via a crafted video file. The connected advisories/documentation confirm the same root cause and indicate the issue has been addressed by upstream fixes in later libde265 vers...

CVE-2022-43248

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via putweightedpredavg16fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

CVE-2022-43239

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mcchroma in motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

CVE-2022-43248

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via putweightedpredavg16fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

CVE-2022-43240

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ffhevcputhevcqpelh2v1sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...