Heap Buffer Overflow

2024-06-2712:17:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

libde265

heap buffer overflow

crafted payload

interceptor_memcpy

system exploit

software

6.6 Medium

AI Score

Confidence

High

JSON

Libde265 is vulnerable to a Heap Buffer Overflow. The vulnerability is due to improper handling of a crafted payload that can cause a crash via the interceptor_memcpy function, allowing an attacker to exploit the system.

CPENameOperatorVersion
libde265.sole0.1.8
libde265.sole0.1.8

CPE	Name	Operator	Version
	libde265.so	le	0.1.8
	libde265.so	le	0.1.8

References

github.com/advisories/GHSA-cvph-c7fw-4mjc

github.com/strukturag/libde265/issues/460

github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-38950

6.6 Medium

AI Score

Confidence

High

JSON

Related for VERACODE:47787