vulnerability

FreeBSD: VID-421c0af9-b206-11ed-9fe5-f4a47516fb57 (CVE-2020-21597): libde256 -- multiple vulnerabilities

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

Feb 21, 2023

Added

Feb 23, 2023

Modified

Jun 15, 2026

Description

libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file.

freebsd-upgrade-package-libde265

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.