VendorsStrukturlibde265all versions
Vulnerabilities

Struktur libde265

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

60CVEs
CVE-2020-21606
libde265 v1.0.4 contains a heap buffer overflow fault in the put_epel_16_fallback function, which can be exploited via a crafted a file.
Published 2021-09-16 · Modified
6.5EPSS 0.011
CVE-2020-21603
libde265 v1.0.4 contains a heap buffer overflow in the put_qpel_0_0_fallback_16 function, which can be exploited via a crafted a file.
Published 2021-09-16 · Modified
6.5EPSS 0.011
CVE-2020-21604
libde265 v1.0.4 contains a heap buffer overflow fault in the _mm_loadl_epi64 function, which can be exploited via a crafted a file.
Published 2021-09-16 · Modified
6.5EPSS 0.011
CVE-2020-21605
libde265 v1.0.4 contains a segmentation fault in the apply_sao_internal function, which can be exploited via a crafted a file.
Published 2021-09-16 · Modified
6.5EPSS 0.010
CVE-2023-24751
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
Published 2023-03-01 · Modified
6.5EPSS 0.008
CVE-2023-47471
Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slice_segment_header function in the slice.cc component.
Published 2023-11-16 · Modified
6.5EPSS 0.008
CVE-2023-27102
Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc.
Published 2023-03-15 · Modified
6.5EPSS 0.007
CVE-2024-38950
Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to __interceptor_memcpy function.
Published 2024-06-26 · Analyzed
6.5EPSS 0.005
CVE-2024-38949
Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to display444as420 function at sdl.cc
Published 2024-06-26 · Analyzed
6.5EPSS 0.004
CVE-2025-61147
strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decoder_context::compute_framedrop_table().
Published 2026-02-23 · Analyzed
6.2EPSS 0.002
CVE-2021-36411
An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in function derive_boundaryStrength of deblock.cc has occurred. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service.
Published 2022-01-10 · Modified
5.5EPSS 0.012
CVE-2021-36410
A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running program dec265.
Published 2022-01-10 · Modified
5.5EPSS 0.009
CVE-2021-36408
An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265.
Published 2022-01-10 · Modified
5.5EPSS 0.009
CVE-2023-24752
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
Published 2023-03-01 · Modified
5.5EPSS 0.003
CVE-2023-24754
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
Published 2023-03-01 · Modified
5.5EPSS 0.003
CVE-2023-24755
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_weighted_pred_8_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
Published 2023-03-01 · Modified
5.5EPSS 0.003
CVE-2023-24756
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
Published 2023-03-01 · Modified
5.5EPSS 0.003
CVE-2023-24757
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_unweighted_pred_16_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
Published 2023-03-01 · Modified
5.5EPSS 0.003
CVE-2023-24758
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
Published 2023-03-01 · Modified
5.5EPSS 0.003
CVE-2026-33165
heap out-of-bounds write in libde265 1.0.16
Published 2026-03-20 · Analyzed
5.5EPSS 0.002
← Prev2 / 2