Libde265 · Libde265 · CVE-2023-43887
**Name of the Vulnerable Software and Affected Versions**
Libde265 version 1.0.12
**Description**
The issue is related to a buffer overflow in the `pic parameter set::dump()` function of the h.265 Libde265 video codec, specifically through the `num tile columns` and `num tile row` parameters. This could allow a remote attacker to disclose protected information or cause a denial of service.
**Recommendations**
For Libde265 version 1.0.12, consider disabling the `pic parameter set::dump()` function until a patch is available to prevent exploitation of the buffer overflow vulnerability via the `num tile columns` and `num tile row` parameters.