CVE-2022-1253

Опубликовано: 06 апр. 2022

Источник: nvd

CVSS3: 7.4

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.

Ссылки

https://github.com/strukturag/libde265/commit/8e89fe0e175d2870c39486fdd09250b230ec10b8
Patch
Third Party Advisory
https://huntr.dev/bounties/1-other-strukturag/libde265
Exploit
Issue Tracking
Patch
Third Party Advisory
https://www.debian.org/security/2023/dsa-5346
https://github.com/strukturag/libde265/commit/8e89fe0e175d2870c39486fdd09250b230ec10b8
Patch
Third Party Advisory
https://huntr.dev/bounties/1-other-strukturag/libde265
Exploit
Issue Tracking
Patch
Third Party Advisory
https://www.debian.org/security/2023/dsa-5346

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:struktur:libde265:*:*:*:*:*:*:*:*

Версия до 1.0.8 (включая)

EPSS

Процентиль: 67%

0.00545

Низкий

7.4 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-122

CWE-787

Связанные уязвимости

CVE-2022-1253

CVSS3: 9.8

ubuntu

больше 3 лет назад

CVE-2022-1253

CVSS3: 9.8

debian

больше 3 лет назад

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 pr ...

GHSA-232g-h7w4-2pxj

CVSS3: 9.8

github

больше 3 лет назад

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to 1.0.8.

EPSS

Процентиль: 67%

0.00545

Низкий

7.4 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-122

CWE-787