Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44609
HistoryDec 08, 2023 - 9:28 a.m.

Buffer Overflow

2023-12-0809:28:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
vulnerability
buffer overflow
libde265.so
read_coding_unit
slice.cc
sanitization
intrapredmode
denial of service

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.8%

libde265.so is vulnerable to Buffer Overflow. The vulnerability is caused by the read_coding_unit function in slice.cc due to a lack of sanitization of the value obtained from intraPredMode.get(x, y). It directly casts the result to an enum IntraPredMode without checking its validity. This potentially can leads to buffer overflow and Denial of Service.

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.8%