Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libde265 | Mar 26, 2024 | Mar 15, 2023 |
| Debian | — | Upgrade libde265 | Dec 4, 2023 | Mar 15, 2023 |
| Ubuntu | — | Upgrade libde265-0 (Ubuntu Pro)Upgrade libde265-0 | Mar 6, 2024 | Mar 15, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub