Описание
libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265_push_NAL() is called with a zero-length NAL unit, the resulting NAL_unit may retain a NULL backing buffer, which is subsequently passed as the destination argument to memcpy() in NAL_unit::set_data(). Although the copy length is zero, this violates the nonnull requirement of memcpy() and results in undefined behavior, causing process termination in UBSan-instrumented builds and denial of service.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.1.3-1 |
| esm-apps-legacy/xenial | released | 1.0.2-2ubuntu0.16.04.1~esm7 |
| esm-apps/bionic | released | 1.0.2-2ubuntu0.18.04.1~esm7 |
| esm-apps/focal | released | 1.0.4-1ubuntu0.4+esm3 |
| esm-apps/jammy | released | 1.0.8-1ubuntu0.3+esm3 |
| esm-apps/resolute | released | 1.0.16-1ubuntu0.1~esm2 |
| jammy | needed | |
| noble | released | 1.0.15-1ubuntu0.2 |
| resolute | needed | |
| stonking | not-affected | 1.1.3-1 |
Показывать по
EPSS
7.5 High
CVSS3
Связанные уязвимости
libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265_push_NAL() is called with a zero-length NAL unit, the resulting NAL_unit may retain a NULL backing buffer, which is subsequently passed as the destination argument to memcpy() in NAL_unit::set_data(). Although the copy length is zero, this violates the nonnull requirement of memcpy() and results in undefined behavior, causing process termination in UBSan-instrumented builds and denial of service.
libde265 commit 4d45a6b contains a NULL pointer dereference vulnerabil ...
libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265_push_NAL() is called with a zero-length NAL unit, the resulting NAL_unit may retain a NULL backing buffer, which is subsequently passed as the destination argument to memcpy() in NAL_unit::set_data(). Although the copy length is zero, this violates the nonnull requirement of memcpy() and results in undefined behavior, causing process termination in UBSan-instrumented builds and denial of service.
EPSS
7.5 High
CVSS3