Approved changes feed: RSS · Atom
cpe:2.3:a:struktur:libde265:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Struktur (34d32917-61bc-5e1b-b86b-5b136ed7a1c8) |
|---|---|
| Product | Libde265 (c35cfeef-0559-5d02-a3b5-359ff14ae25d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libde265 |
purl2cpe | 2026-06-01 10:11:29.133422 |
pkg:deb/ubuntu/libde265 |
purl2cpe | 2026-06-01 10:11:29.133426 |
pkg:github/imagemagick/libde265 |
purl2cpe | 2026-06-01 10:11:29.133429 |
pkg:github/strukturag/libde265 |
purl2cpe | 2026-06-01 10:11:29.133433 |
pkg:github/tridge/libde265 |
purl2cpe | 2026-06-01 10:11:29.133436 |
pkg:rpm/opensuse/libde265 |
purl2cpe | 2026-06-01 10:11:29.133439 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-33165 |
vulnerable | 2026-06-08 07:59:09.269664 |
heap out-of-bounds write in libde265 1.0.16
MEDIUM (5.5)
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a crafted HEVC bitstream causes an out-of-bounds heap write confirmed by AddressSanitizer. The trigger is a stale ctb_info.log2unitSize after an SPS change where PicWidthInCtbsY and PicHeightInCtbsY stay constant but Log2CtbSizeY changes, causing set_SliceHeaderIndex to index past the allocated image metadata array and write 2 bytes past the end of a heap allocation. This issue has been patched in version 1.0.17.
Published: 2026-03-20T20:32:36.603Z
Updated: 2026-03-24T18:48:34.866Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33164 |
vulnerable | 2026-06-08 07:59:09.269074 |
NULL Pointer Dereference in libde265
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in pic_parameter_set::set_derived_values(). This issue has been patched in version 1.0.17.
Published: 2026-03-20T20:33:04.054Z
Updated: 2026-03-23T16:50:53.124Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61147 |
vulnerable | 2026-06-08 07:37:27.497829 |
Details available
strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decoder_context::compute_framedrop_table().
Published: 2026-02-23T00:00:00.000Z
Updated: 2026-02-23T20:31:07.047Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38949 |
vulnerable | 2026-06-08 06:41:48.627892 |
Details available
Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to display444as420 function at sdl.cc
Published: 2024-06-26T00:00:00.000Z
Updated: 2024-08-02T04:19:20.484Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1253 |
vulnerable | 2026-06-08 05:39:12.496870 |
Heap-based Buffer Overflow in strukturag/libde265
HIGH (7.4)
Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.
Published: 2022-04-06T00:00:00.000Z
Updated: 2024-08-02T23:55:24.444Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.