PT-2022-7253 · Libde265+4 · Libde265+4
Peng Deng
·
Published
2022-10-10
·
Updated
2025-06-25
·
CVE-2022-43243
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Libde265 versions 1.0.8
Description
The issue is related to a heap-buffer-overflow vulnerability via the
ff hevc put weighted pred avg 8 sse function in sse-motion.cc. This allows attackers to cause a Denial of Service (DoS) via a crafted video file. The vulnerability is associated with the Libde265 video codec implementation of h.265.Recommendations
For Libde265 version 1.0.8, update to version 1.0.11 to fix the security issue. As a temporary workaround, consider avoiding the use of the
ff hevc put weighted pred avg 8 sse function until a patch is available. Restrict access to crafted video files to minimize the risk of exploitation.Exploit
Fix
DoS
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Libde265
Linuxmint
Red Os
Ubuntu