CVE-2023-49467

2023-12-0700:00:00

ubuntu.com

cve-2023-49467

libde265

heap-buffer-overflow

derive_combined_bipredictive_merging_candidates

motion.cc

unix

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.8%

JSON

Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow
vulnerability in the derive_combined_bipredictive_merging_candidates
function at motion.cc.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlibde265< 1.0.2-2ubuntu0.18.04.1~esm4UNKNOWN
ubuntu20.04noarchlibde265< 1.0.4-1ubuntu0.4UNKNOWN
ubuntu22.04noarchlibde265< 1.0.8-1ubuntu0.3UNKNOWN
ubuntu23.10noarchlibde265< 1.0.12-2ubuntu0.1UNKNOWN
ubuntu16.04noarchlibde265< 1.0.2-2ubuntu0.16.04.1~esm4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	libde265	< 1.0.2-2ubuntu0.18.04.1~esm4	UNKNOWN
ubuntu	20.04	noarch	libde265	< 1.0.4-1ubuntu0.4	UNKNOWN
ubuntu	22.04	noarch	libde265	< 1.0.8-1ubuntu0.3	UNKNOWN
ubuntu	23.10	noarch	libde265	< 1.0.12-2ubuntu0.1	UNKNOWN
ubuntu	16.04	noarch	libde265	< 1.0.2-2ubuntu0.16.04.1~esm4	UNKNOWN