{"id":"CVE-2023-51792","aliases":["DEBIAN-CVE-2023-51792","EUVD-2023-56476","GHSA-xj57-m8w7-83wf","ROOT-OS-DEBIAN-11-CVE-2023-51792","ROOT-OS-DEBIAN-12-CVE-2023-51792","UBUNTU-CVE-2023-51792","USN-6764-1"],"status":"published","title":"Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of...","description":"Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00232,"percentile":0.1417,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-121"],"published":"2024-04-19T00:00:00Z","modified":"2026-10-26T18:02:35Z","fixes":[{"ecosystem":"Debian:12","package":"libde265","fixed_in":["1.0.11-1+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libde265","fixed_in":["1.0.13-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libde265","fixed_in":["1.0.13-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libde265","fixed_in":["1.0.2-2ubuntu0.16.04.1~esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libde265","fixed_in":["1.0.2-2ubuntu0.18.04.1~esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libde265","fixed_in":["1.0.4-1ubuntu0.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libde265","fixed_in":["1.0.8-1ubuntu0.3+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.11-1+deb12u3"}]}],"versions":["1.0.11-1","1.0.11-1+deb12u1","1.0.11-1+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.13-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.13-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2ubuntu0.16.04.1~esm5"}]}],"versions":["1.0.2-1build1","1.0.2-2","1.0.2-2ubuntu0.16.04.1~esm1","1.0.2-2ubuntu0.16.04.1~esm2","1.0.2-2ubuntu0.16.04.1~esm3","1.0.2-2ubuntu0.16.04.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2ubuntu0.18.04.1~esm5"}]}],"versions":["1.0.2-2build1","1.0.2-2ubuntu0.18.04.1~esm1","1.0.2-2ubuntu0.18.04.1~esm2","1.0.2-2ubuntu0.18.04.1~esm3","1.0.2-2ubuntu0.18.04.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4-1ubuntu0.4+esm1"}]}],"versions":["1.0.3-1build1","1.0.4-1","1.0.4-1build1","1.0.4-1ubuntu0.1","1.0.4-1ubuntu0.2","1.0.4-1ubuntu0.3","1.0.4-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-1ubuntu0.3+esm1"}]}],"versions":["1.0.8-1","1.0.8-1ubuntu0.1","1.0.8-1ubuntu0.2","1.0.8-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2ubuntu0.16.04.1~esm5"}]}],"versions":["1.0.2-1build1","1.0.2-2","1.0.2-2ubuntu0.16.04.1~esm1","1.0.2-2ubuntu0.16.04.1~esm2","1.0.2-2ubuntu0.16.04.1~esm3","1.0.2-2ubuntu0.16.04.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2ubuntu0.18.04.1~esm5"}]}],"versions":["1.0.2-2build1","1.0.2-2ubuntu0.18.04.1~esm1","1.0.2-2ubuntu0.18.04.1~esm2","1.0.2-2ubuntu0.18.04.1~esm3","1.0.2-2ubuntu0.18.04.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4-1ubuntu0.4+esm1"}]}],"versions":["1.0.3-1build1","1.0.4-1","1.0.4-1build1","1.0.4-1ubuntu0.1","1.0.4-1ubuntu0.2","1.0.4-1ubuntu0.3","1.0.4-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-1ubuntu0.3+esm1"}]}],"versions":["1.0.8-1","1.0.8-1ubuntu0.1","1.0.8-1ubuntu0.2","1.0.8-1ubuntu0.3"]}],"products":[{"vendor":"mitre","product":"caldera"}],"references":[{"url":"https://github.com/strukturag/libde265","tags":["x_transferred","package","report"]},{"url":"https://github.com/strukturag/libde265/issues/427","tags":["x_transferred","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51792"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY"},{"url":"https://github.com/advisories/GHSA-xj57-m8w7-83wf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-51792","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-51792","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51792","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6764-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-51792","description":"Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.","status":"published","published":"2024-04-19T00:00:00Z","modified":"2025-11-04T17:13:49.232Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:35:17.48054Z"}],"euvd":[{"id":"EUVD-2023-56476","description":"Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.","status":"published","published":"2024-04-19T00:00:00Z","modified":"2025-11-04T17:13:49Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T19:49:28.381167Z"}],"ghsa":[{"id":"GHSA-xj57-m8w7-83wf","title":"Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of...","description":"Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.","status":"published","published":"2024-04-19T18:31:15Z","modified":"2025-11-04T18:30:50Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:04:33.412684Z"}],"nvd":[{"id":"CVE-2023-51792","description":"Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.","status":"published","published":"2024-04-19T17:15:52.24Z","modified":"2026-06-17T06:41:40.86Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:09:11.362739Z"}],"osv":[{"id":"CVE-2023-51792","description":"Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.","status":"published","published":"2024-04-19T17:15:52.24Z","modified":"2026-03-15T22:47:48.605051Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"DEBIAN-CVE-2023-51792","description":"Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.","status":"published","published":"2024-04-19T17:15:52.24Z","modified":"2026-10-26T18:02:35.854671447Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"UBUNTU-CVE-2023-51792","description":"Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.","status":"published","published":"2024-04-19T17:15:00Z","modified":"2026-04-22T14:16:09.672672Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2023-51792","title":"CVE-2023-51792 in libde265 - Patched by Root","description":"Root has patched CVE-2023-51792 in the libde265 package for Root:Debian:11. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-20T13:40:39Z","modified":"2026-09-11T08:00:05.044099518Z","updated_at":"2026-11-02T15:53:28.80888Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2023-51792","title":"CVE-2023-51792 in libde265 - Patched by Root","description":"Root has patched CVE-2023-51792 in the libde265 package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-25T11:02:16Z","modified":"2026-10-01T08:00:06.042907047Z","updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"USN-6764-1","title":"libde265 vulnerability","description":"It was discovered that libde265 could be made to allocate memory that\nexceeds the maximum supported size. If a user or automated system were\ntricked into opening a specially crafted file, an attacker could possibly\nuse this issue to cause a denial of service.\n","status":"published","published":"2024-05-07T14:58:23Z","modified":"2026-06-25T13:32:28.720835307Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}