Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Litios

#26897of 53,622
9.4Total CVSS
Vulnerabilities · 1
PT-2023-8875
9.4
2023-11-22
Libde265 · Libde265 · CVE-2023-43887
**Name of the Vulnerable Software and Affected Versions** Libde265 version 1.0.12 **Description** The issue is related to a buffer overflow in the `pic parameter set::dump()` function of the h.265 Libde265 video codec, specifically through the `num tile columns` and `num tile row` parameters. This could allow a remote attacker to disclose protected information or cause a denial of service. **Recommendations** For Libde265 version 1.0.12, consider disabling the `pic parameter set::dump()` function until a patch is available to prevent exploitation of the buffer overflow vulnerability via the `num tile columns` and `num tile row` parameters.