Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Fdu-Secopened

#33851of 53,619
7.8Total CVSS
Vulnerabilities · 1
PT-2022-7271
7.8
2022-02-11
Libde265 · Libde265 · CVE-2022-43250
**Name of the Vulnerable Software and Affected Versions** Libde265 version 1.0.8 **Description** The issue is related to a heap-buffer-overflow vulnerability in the `put qpel 0 0 fallback 16` function, located in `fallback-motion.cc`, which is part of the Libde265 video codec implementation. This vulnerability can be exploited by an attacker to cause a Denial of Service (DoS) using a specially crafted video file. **Recommendations** For Libde265 version 1.0.8, update to version 1.0.11 to fix the security issue. As a temporary workaround, consider restricting the use of the `put qpel 0 0 fallback 16` function in `fallback-motion.cc` until a patch is available.