CVE-2024-38949

2024-06-2600:00:00

mitre

github.com

heap buffer overflow

libde265

vulnerability

sdl.cc

crafted payload

application crash

cve-2024-38949

AI Score

6.8

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to display444as420 function at sdl.cc

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:struktur:libde265:*:*:*:*:*:*:*:*"
    ],
    "vendor": "struktur",
    "product": "libde265",
    "versions": [
      {
        "status": "affected",
        "version": "v1.0.15"
      }
    ],
    "defaultStatus": "unknown"
  }
]