PT-2023-1850 · Libde265+4 · Libde265+4

Jieyong Mao

·

Publicado

2023-01-28

·

Atualizado

2024-02-26

·

CVE-2023-24758

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions libde265 version 1.0.10
Description The issue is related to a NULL pointer dereference in the ff hevc put weighted pred avg 8 sse function at sse-motion.cc in the libde265 video codec implementation. This allows attackers to cause a Denial of Service (DoS) via a crafted input file.
Recommendations For libde265 version 1.0.10, update to version 1.0.11 to fix the security issue. As a temporary workaround, consider restricting the use of the ff hevc put weighted pred avg 8 sse function until a patch is available.

Exploit

Correção

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2023-01445
BDU:2023-01446
BDU:2023-01447
BDU:2023-01448
BDU:2023-01449
CVE-2023-24758
DLA-3352-1
DSA-5346-1
MGASA-2023-0093
USN-6659-1

Produtos afetados

Astra Linux
Linuxmint
Red Os
Ubuntu
Libde265