libde265 v1.0.4 contains a heap buffer overflow in the put_qpel_0_0_fallback_16 function, which can be exploited via a crafted a file.
References
Link | Resource |
---|---|
https://github.com/strukturag/libde265/issues/240 | Exploit Issue Tracking Third Party Advisory |
https://www.debian.org/security/2023/dsa-5346 | |
https://github.com/strukturag/libde265/issues/240 | Exploit Issue Tracking Third Party Advisory |
https://www.debian.org/security/2023/dsa-5346 |
Configurations
History
21 Nov 2024, 05:12
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/strukturag/libde265/issues/240 - Exploit, Issue Tracking, Third Party Advisory | |
References | () https://www.debian.org/security/2023/dsa-5346 - |
Information
Published : 2021-09-16 22:15
Updated : 2024-11-21 05:12
NVD link : CVE-2020-21603
Mitre link : CVE-2020-21603
CVE.ORG link : CVE-2020-21603
JSON object : View
Products Affected
struktur
- libde265
CWE
CWE-787
Out-of-bounds Write