{"id":"CVE-2026-45382","aliases":["ALPINE-CVE-2026-45382","BELL-CVE-2026-45382","DEBIAN-CVE-2026-45382","EUVD-2026-46428","GHSA-hwhx-x2mq-ccr9","MGASA-2026-0420","ROOT-OS-DEBIAN-11-CVE-2026-45382","ROOT-OS-DEBIAN-12-CVE-2026-45382","UBUNTU-CVE-2026-45382","USN-8573-1"],"status":"published","title":"libde265 has a heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry","description":"libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrRStoTS[ctbAddrRS]` at line 966 where `ctbAddrRS = ctbY * ctbsWidth + ctbX` is computed from PPS-supplied `colBd[]`/`rowBd[]` arrays without validating the result against `CtbAddrRStoTS.size() == sps-\u003ePicSizeInCtbsY`. A malformed PPS that passes `set_derived_values` but encodes geometry inconsistent with the SPS produces a `ctbAddrRS` past the allocation, causing a 4-byte heap-buffer-overflow READ. Version 1.0.19 fixes the issue.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00428,"percentile":0.373,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2026-06-27T13:44:28.492748Z","modified":"2026-10-28T02:30:26Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"libde265","fixed_in":["1.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libde265","fixed_in":["1.1.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libde265","fixed_in":["1.0.11-1+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libde265","fixed_in":["1.0.15-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libde265","fixed_in":["1.1.1-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"libde265","fixed_in":["1.0.11-0+deb11u4.aikido.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-libde265","fixed_in":["1.0.11-0+deb11u4.aikido.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libde265","fixed_in":["1.0.2-2ubuntu0.16.04.1~esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libde265","fixed_in":["1.0.2-2ubuntu0.18.04.1~esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libde265","fixed_in":["1.0.4-1ubuntu0.4+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libde265","fixed_in":["1.0.8-1ubuntu0.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libde265","fixed_in":["1.0.15-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:26.04:LTS","package":"libde265","fixed_in":["1.0.16-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.16-r0"},{"fixed":"1.1.1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.11-1+deb12u3"}]}],"versions":["1.0.11-1","1.0.11-1+deb12u1","1.0.11-1+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.15-1+deb13u1"}]}],"versions":["1.0.15-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1"}]}],"versions":["1.0.15-1","1.0.16-1","1.0.18-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.16-4.1.mga10"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:10","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.16-4.1.mga10.tainted"}]}],"bundled":12},{"source":"osv","ecosystem":"Root:Debian:11","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.11-0+deb11u4.aikido.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.11-0+deb11u4.aikido.13"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2ubuntu0.16.04.1~esm6"}]}],"versions":["1.0.2-1build1","1.0.2-2","1.0.2-2ubuntu0.16.04.1~esm1","1.0.2-2ubuntu0.16.04.1~esm2","1.0.2-2ubuntu0.16.04.1~esm3","1.0.2-2ubuntu0.16.04.1~esm4","1.0.2-2ubuntu0.16.04.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2ubuntu0.18.04.1~esm6"}]}],"versions":["1.0.2-2build1","1.0.2-2ubuntu0.18.04.1~esm1","1.0.2-2ubuntu0.18.04.1~esm2","1.0.2-2ubuntu0.18.04.1~esm3","1.0.2-2ubuntu0.18.04.1~esm4","1.0.2-2ubuntu0.18.04.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4-1ubuntu0.4+esm2"}]}],"versions":["1.0.3-1build1","1.0.4-1","1.0.4-1build1","1.0.4-1ubuntu0.1","1.0.4-1ubuntu0.2","1.0.4-1ubuntu0.3","1.0.4-1ubuntu0.4","1.0.4-1ubuntu0.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-1ubuntu0.3+esm2"}]}],"versions":["1.0.8-1","1.0.8-1ubuntu0.1","1.0.8-1ubuntu0.2","1.0.8-1ubuntu0.3","1.0.8-1ubuntu0.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.15-1ubuntu0.1"}]}],"versions":["1.0.12-2","1.0.13-1","1.0.15-1","1.0.15-1build1","1.0.15-1build2","1.0.15-1build3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.15-1build5","1.0.16-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.16-1ubuntu0.1~esm1"}]}],"versions":["1.0.16-1","1.0.16-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2ubuntu0.16.04.1~esm6"}]}],"versions":["1.0.2-1build1","1.0.2-2","1.0.2-2ubuntu0.16.04.1~esm1","1.0.2-2ubuntu0.16.04.1~esm2","1.0.2-2ubuntu0.16.04.1~esm3","1.0.2-2ubuntu0.16.04.1~esm4","1.0.2-2ubuntu0.16.04.1~esm5"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2ubuntu0.18.04.1~esm6"}]}],"versions":["1.0.2-2build1","1.0.2-2ubuntu0.18.04.1~esm1","1.0.2-2ubuntu0.18.04.1~esm2","1.0.2-2ubuntu0.18.04.1~esm3","1.0.2-2ubuntu0.18.04.1~esm4","1.0.2-2ubuntu0.18.04.1~esm5"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4-1ubuntu0.4+esm2"}]}],"versions":["1.0.3-1build1","1.0.4-1","1.0.4-1build1","1.0.4-1ubuntu0.1","1.0.4-1ubuntu0.2","1.0.4-1ubuntu0.3","1.0.4-1ubuntu0.4","1.0.4-1ubuntu0.4+esm1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-1ubuntu0.3+esm2"}]}],"versions":["1.0.8-1","1.0.8-1ubuntu0.1","1.0.8-1ubuntu0.2","1.0.8-1ubuntu0.3","1.0.8-1ubuntu0.3+esm1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.15-1ubuntu0.1"}]}],"versions":["1.0.12-2","1.0.13-1","1.0.15-1","1.0.15-1build1","1.0.15-1build2","1.0.15-1build3"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"libde265","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.16-1ubuntu0.1~esm1"}]}],"versions":["1.0.16-1","1.0.16-1build1"],"bundled":12}],"products":[{"vendor":"strukturag","product":"libde265"}],"references":[{"url":"https://github.com/strukturag/libde265/security/advisories/GHSA-hwhx-x2mq-ccr9","tags":["x_refsource_CONFIRM","exploit","advisory","report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-45382","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-45382","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45382.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45382","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-45382","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0420.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35987","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8573-1","tags":["advisory"]},{"url":"https://github.com/strukturag/libde265/issues/460","tags":["report"]},{"url":"https://github.com/strukturag/libde265/issues/484","tags":["report"]},{"url":"https://github.com/strukturag/libde265/security/advisories/GHSA-wqrf-6rf5-v78r","tags":["advisory"]},{"url":"https://github.com/strukturag/libde265/security/advisories/GHSA-653q-9f73-8hvg","tags":["advisory"]},{"url":"https://github.com/strukturag/libde265/security/advisories/GHSA-wg9q-ppqw-6q38","tags":["advisory"]},{"url":"https://github.com/strukturag/libde265/security/advisories/GHSA-g2rg-wj66-w594","tags":["advisory"]},{"url":"https://github.com/strukturag/libde265/security/advisories/GHSA-g5hj-rf9f-7vxm","tags":["advisory"]},{"url":"https://github.com/strukturag/libde265/security/advisories/GHSA-vv8h-932h-7r86","tags":["advisory"]},{"url":"https://github.com/strukturag/libde265/security/advisories/GHSA-ccfw-29x7-rrx3","tags":["advisory"]},{"url":"https://github.com/strukturag/libde265/security/advisories/GHSA-j2qq-x2xq-g9wr","tags":["advisory"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00324.html","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00397.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-45382","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38949","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38950","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-61147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-49295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-49337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-49346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-54240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-54241","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-45382","title":"libde265 has a heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry","description":"libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrRStoTS[ctbAddrRS]` at line 966 where `ctbAddrRS = ctbY * ctbsWidth + ctbX` is computed from PPS-supplied `colBd[]`/`rowBd[]` arrays without validating the result against `CtbAddrRStoTS.size() == sps-\u003ePicSizeInCtbsY`. A malformed PPS that passes `set_derived_values` but encodes geometry inconsistent with the SPS produces a `ctbAddrRS` past the allocation, causing a 4-byte heap-buffer-overflow READ. Version 1.0.19 fixes the issue.","status":"published","published":"2026-07-21T20:57:48.312Z","modified":"2026-07-23T14:10:50.623Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T13:46:32.755125Z"}],"euvd":[{"id":"EUVD-2026-46428","description":"libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrRStoTS[ctbAddrRS]` at line 966 where `ctbAddrRS = ctbY * ctbsWidth + ctbX` is computed from PPS-supplied `colBd[]`/`rowBd[]` arrays without validating the result against `CtbAddrRStoTS.size() == sps-\u003ePicSizeInCtbsY`. A malformed PPS that passes `set_derived_values` but encodes geometry inconsistent with the SPS produces a `ctbAddrRS` past the allocation, causing a 4-byte heap-buffer-overflow READ. Version 1.0.19 fixes the issue.","status":"published","published":"2026-07-21T20:57:48Z","modified":"2026-07-23T14:10:50Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T18:19:44.021778Z"}],"nvd":[{"id":"CVE-2026-45382","description":"libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrRStoTS[ctbAddrRS]` at line 966 where `ctbAddrRS = ctbY * ctbsWidth + ctbX` is computed from PPS-supplied `colBd[]`/`rowBd[]` arrays without validating the result against `CtbAddrRStoTS.size() == sps-\u003ePicSizeInCtbsY`. A malformed PPS that passes `set_derived_values` but encodes geometry inconsistent with the SPS produces a `ctbAddrRS` past the allocation, causing a 4-byte heap-buffer-overflow READ. Version 1.0.19 fixes the issue.","status":"published","published":"2026-07-21T21:16:49.863Z","modified":"2026-10-24T19:10:00.127Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:12:31.394335Z"}],"osv":[{"id":"ALPINE-CVE-2026-45382","description":"libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrRStoTS[ctbAddrRS]` at line 966 where `ctbAddrRS = ctbY * ctbsWidth + ctbX` is computed from PPS-supplied `colBd[]`/`rowBd[]` arrays without validating the result against `CtbAddrRStoTS.size() == sps-\u003ePicSizeInCtbsY`. A malformed PPS that passes `set_derived_values` but encodes geometry inconsistent with the SPS produces a `ctbAddrRS` past the allocation, causing a 4-byte heap-buffer-overflow READ. Version 1.0.19 fixes the issue.","status":"published","published":"2026-07-21T21:16:49.863Z","modified":"2026-10-23T18:30:03.868099039Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"CVE-2026-45382","title":"libde265 has a heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry","description":"libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrRStoTS[ctbAddrRS]` at line 966 where `ctbAddrRS = ctbY * ctbsWidth + ctbX` is computed from PPS-supplied `colBd[]`/`rowBd[]` arrays without validating the result against `CtbAddrRStoTS.size() == sps-\u003ePicSizeInCtbsY`. A malformed PPS that passes `set_derived_values` but encodes geometry inconsistent with the SPS produces a `ctbAddrRS` past the allocation, causing a 4-byte heap-buffer-overflow READ. Version 1.0.19 fixes the issue.","status":"published","published":"2026-07-21T20:57:48.312Z","modified":"2026-10-28T02:30:26.992017277Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:45:05.525666Z"},{"id":"DEBIAN-CVE-2026-45382","description":"libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrRStoTS[ctbAddrRS]` at line 966 where `ctbAddrRS = ctbY * ctbsWidth + ctbX` is computed from PPS-supplied `colBd[]`/`rowBd[]` arrays without validating the result against `CtbAddrRStoTS.size() == sps-\u003ePicSizeInCtbsY`. A malformed PPS that passes `set_derived_values` but encodes geometry inconsistent with the SPS produces a `ctbAddrRS` past the allocation, causing a 4-byte heap-buffer-overflow READ. Version 1.0.19 fixes the issue.","status":"published","published":"2026-07-21T21:16:49.863Z","modified":"2026-10-25T09:47:28.278066206Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:45:55.669088Z"},{"id":"UBUNTU-CVE-2026-45382","description":"libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrRStoTS[ctbAddrRS]` at line 966 where `ctbAddrRS = ctbY * ctbsWidth + ctbX` is computed from PPS-supplied `colBd[]`/`rowBd[]` arrays without validating the result against `CtbAddrRStoTS.size() == sps-\u003ePicSizeInCtbsY`. A malformed PPS that passes `set_derived_values` but encodes geometry inconsistent with the SPS produces a `ctbAddrRS` past the allocation, causing a 4-byte heap-buffer-overflow READ. Version 1.0.19 fixes the issue.","status":"published","published":"2026-07-01T00:00:00Z","modified":"2026-07-29T10:18:12.340718316Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T16:56:26.396868Z"},{"id":"BELL-CVE-2026-45382","status":"published","published":"2026-06-27T13:44:28.492748Z","modified":"2026-06-28T07:15:23.409595365Z","updated_at":"2026-11-02T15:28:24.12174Z"},{"id":"MGASA-2026-0420","title":"Updated libde265 package fixes security vulnerabilities","description":"Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers\nto crash the application via crafted payload to display444as420 function\nat sdl.cc. (CVE-2024-38949)\nHeap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers\nto crash the application via crafted payload to __interceptor_memcpy\nfunction. (CVE-2024-38950)\nstrukturag libde265 commit d9fea9d wa discovered to contain a\nsegmentation fault via the component\ndecoder_context::compute_framedrop_table(). (CVE-2025-61147)\nNULL Pointer Dereference in libde265. (CVE-2026-33164)\nHeap out-of-bounds write in libde265 1.0.16. (CVE-2026-33165)\nlibde265 has a heap-buffer-overflow READ in decode_slice_unit_tiles via\nunvalidated PPS tile geometry. (CVE-2026-45382)\nlibde265 has a heap buffer overflow (OOB read) in\ndecode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access —\nlibde265 \u003c= v1.0.18. (CVE-2026-45383)\nlibde265 has an out-of-bounds write in process_reference_picture_set via\npredicted short-term RPS. (CVE-2026-49295)\nlibde265 has an unbounded memory leak via orphaned slice headers in\n`read_slice_NAL`. (CVE-2026-49337)\nlibde265 has a heap buffer overflow in de265_image_get_buffer via SPS\ndimension integer overflow. (CVE-2026-49346)\nPixel accessor signed integer overflow causes heap OOB read/write.\n(CVE-2026-54240)\nSAO sequential filter heap buffer overflow via signed integer overflow.\n(CVE-2026-54241)\n","status":"published","published":"2026-09-20T04:25:32Z","modified":"2026-09-20T04:30:03.388103105Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-45382","title":"CVE-2026-45382 in libde265 - Patched by Root","description":"Root has patched CVE-2026-45382 in the libde265 package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-09-11T06:52:13Z","modified":"2026-09-11T07:15:05.262858793Z","updated_at":"2026-11-02T15:53:30.179841Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-45382","title":"CVE-2026-45382 in libde265 - Patched by Root","description":"Root has patched CVE-2026-45382 in the libde265 package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-25T11:02:16Z","modified":"2026-10-01T08:00:06.03776138Z","updated_at":"2026-11-02T15:53:32.037361Z"},{"id":"USN-8573-1","title":"libde265 vulnerabilities","description":"It was discovered that libde265 did not properly manage memory under\ncertain circumstances. An attacker could possibly use this issue to\ncause libde265 to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 22.04 LTS. (CVE-2023-51792)\n\nIt was discovered that libde265 did not properly handle certain\nmalformed media files, leading to a heap buffer overflow. An attacker\ncould possibly use this issue to cause libde265 to crash, resulting in\na denial of service. (CVE-2024-38949, CVE-2024-38950)\n\nIt was discovered that libde265 did not properly handle certain\nmalformed input, leading to a segmentation fault. An attacker could\npossibly use this issue to cause libde265 to crash, resulting in a\ndenial of service. (CVE-2025-61147)\n\nIt was discovered that libde265 did not properly handle a malformed\nH.265 PPS NAL unit, leading to a segmentation fault. An attacker could\npossibly use this issue to cause libde265 to crash, resulting in a\ndenial of service. (CVE-2026-33164)\n\nIt was discovered that libde265 did not properly handle certain\ncrafted HEVC bitstreams, leading to an out-of-bounds write. An attacker\ncould possibly use this issue to cause libde265 to crash, resulting in\na denial of service. (CVE-2026-33165)\n\nValentin Mercier discovered that libde265 did not properly validate\ntile geometry when handling crafted media files, leading to an\nout-of-bounds read. An attacker could possibly use this issue to cause\nlibde265 to crash, resulting in a denial of service, or to obtain\nsensitive information. (CVE-2026-45382)\n\nIt was discovered that libde265 did not properly validate certain\nvalues when decoding crafted media files, leading to an out-of-bounds\nread. An attacker could possibly use this issue to cause libde265 to\ncrash, resulting in a denial of service, or to obtain sensitive\ninformation. (CVE-2026-45383)\n\nYing Dong discovered that libde265 did not properly validate reference\npicture set entries when handling a crafted H.265 bitstream, leading to\nan out-of-bounds write. An attacker could possibly use this issue to\ncause libde265 to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2026-49295)\n\nYing Dong discovered that libde265 did not properly manage memory when\nhandling a crafted sequence of H.265 NAL units, leading to excessive\nmemory consumption. An attacker could possibly use this issue to cause\nlibde265 to use excessive resources, leading to a denial of service.\n(CVE-2026-49337)\n\nYing Dong discovered that libde265 did not properly handle certain\ncrafted H.265 bitstreams with large dimensions, leading to a heap\nbuffer overflow. An attacker could possibly use this issue to cause\nlibde265 to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2026-49346)\n\nIt was discovered that libde265 did not properly handle certain crafted\nHEVC bitstreams with large dimensions, leading to an out-of-bounds\nread and write. An attacker could possibly use this issue to cause\nlibde265 to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2026-54240)\n\nIt was discovered that libde265 did not properly handle certain crafted\nHEVC bitstreams with large dimensions, leading to a heap buffer\noverflow. An attacker could possibly use this issue to cause libde265\nto crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2026-54241)","status":"published","published":"2026-07-20T19:21:39Z","modified":"2026-09-14T11:17:38.296060606Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}