PT-2022-6511 · Libde265+5 · Libde265+5

Xidoo123 · Published 2022-12-18 · Updated 2025-03-07 · CVE-2022-47665

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Libde265 version 1.0.9

Description The issue is related to a heap buffer overflow in the de265 image::set SliceAddrRS(int, int, int) function of the Libde265 video codec. This can potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Libde265 version 1.0.9, update to version 1.0.11 to fix the security issues. As a temporary workaround, consider disabling the de265 image::set SliceAddrRS(int, int, int) function until a patch is available.

Exploit

Fix

Memory Corruption

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

CWE-120

Related Identifiers

ALT-PU-2023-1213

BDU:2023-01833

BDU:2023-01838

CVE-2022-47665

DLA-3352-1

DSA-5346-1

MGASA-2023-0093

USN-6659-1

Affected Products

Alt Linux

Astra Linux

Libde265

Linuxmint

Red Os

Ubuntu

References · 44

• 🔥 https://github.com/strukturag/libde265/issues/369 · Exploit
• https://ubuntu.com/security/CVE-2022-43244 · Vendor Advisory
• https://debian.org/lts/security/2022/dla-3240 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-24754 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0093 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01833 · Security Note
• https://bdu.fstec.ru/vul/2023-01838 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-47665 · Security Note
• https://ubuntu.com/security/CVE-2023-25221 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-47664 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-24751 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0426SE17 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0093.html · Security Note
• https://ubuntu.com/security/notices/USN-6659-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-47665 · Vendor Advisory