Описание
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates function at motion.cc.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libde265 | fixed | 1.0.15-1 | package | |
| libde265 | fixed | 1.0.11-1+deb12u2 | bookworm | package |
| libde265 | fixed | 1.0.11-0+deb11u3 | bullseye | package |
Примечания
https://github.com/strukturag/libde265/issues/434
Fixed by: https://github.com/strukturag/libde265/commit/7e4faf254bbd2e52b0f216cb987573a2cce97b54 (v1.0.15)
EPSS
Связанные уязвимости
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates function at motion.cc.
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates function at motion.cc.
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates function at motion.cc.
Уязвимость функции derive_combined_bipredictive_merging_candidates (motion.cc) реализации видеокодека h.265 Libde265, позволяющая нарушителю оказать влияние на конфиденциальность, целостность и доступность защищаемой информации
EPSS