PT-2022-7254 · Libde265+3 · Libde265+3
Published
2022-10-10
·
Updated
2025-01-28
·
CVE-2022-43248
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Libde265 versions prior to 1.0.11
Description
The issue is related to a heap-buffer-overflow in the
put weighted pred avg 16 fallback() function, located in fallback-motion.cc, which can be exploited by attackers to cause a Denial of Service (DoS) via a crafted video file. This can be achieved by a remote attacker.Recommendations
For versions prior to 1.0.11, update to version 1.0.11 to resolve the issue. As a temporary workaround, consider avoiding the use of crafted video files that could exploit the
put weighted pred avg 16 fallback() function in fallback-motion.cc.Exploit
Fix
DoS
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Libde265
Linuxmint
Ubuntu