vulnerability

Alpine Linux: CVE-2023-49465: Out-of-bounds Write

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

Dec 7, 2023

Added

Mar 26, 2024

Modified

Jun 18, 2026

Description

Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function at motion.cc.

alpine-linux-upgrade-libde265

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.