CVE-2023-25221

Summary

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function in motion.cc.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/strukturag/libde265/issues/388
• https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/strukturag/libde265/issues/388
• https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html

• ←Previous
• Next→