CVE-2024-38950

Опубликовано: 26 июн. 2024

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to __interceptor_memcpy function.

Ссылки

https://github.com/strukturag/libde265/issues/460
Exploit
Issue Tracking
https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-38950
Third Party Advisory
https://github.com/strukturag/libde265/issues/460
Exploit
Issue Tracking
https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-38950
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:struktur:libde265:1.0.15:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00265

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVE-2024-38950

CVSS3: 6.5

ubuntu

больше 1 года назад

Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to __interceptor_memcpy function.

CVE-2024-38950

CVSS3: 6.5

debian

больше 1 года назад

Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attacker ...

GHSA-cvph-c7fw-4mjc

CVSS3: 6.5

github

больше 1 года назад

Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to __interceptor_memcpy function.

EPSS

Процентиль: 50%

0.00265

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-122