CVE-2023-51792
published 2024-04-19CVE-2023-51792: Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported…
PriorityP49low3.3CVSS 3.1
AVLACLPRLUINSUCNILAN
EPSS
0.23%
13.9th percentile
Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libde265 | < libde265 1.0.13-1 (forky) | libde265 1.0.13-1 (forky) |
| struktur | libde265 | >= 0 < 1.0.13-1 | 1.0.13-1 |
| struktur | libde265 | >= 0 < 1.0.13-1 | 1.0.13-1 |
| ubuntu | libde265 | — | — |
CVSS provenance
nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
osv3.3LOW
vendor_debian3.3LOW
vendor_ubuntu3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
libde265 vulnerabilities
vendor_ubuntu·2026-07-20·CVSS 3.3
CVE-2026-45382 [LOW] libde265 vulnerabilities
Title: libde265 vulnerabilities
Summary: Several security issues were fixed in libde265.
It was discovered that libde265 did not properly manage memory under
certain circumstances. An attacker could possibly use this issue to
cause libde265 to crash, resulting in a denial of service. This issue
only affected Ubuntu 22.04 LTS. (CVE-2023-51792)
It was discovered that libde265 did not properly handle certain
malformed media files, leading to a heap buffer overflow. An attacker
could possibly use this issue to cause libde265 to crash, resulting in
a denial of service. (CVE-2024-38949, CVE-2024-38950)
It was discovered that libde265 did not properly handle certain
malformed input, leading to a segmentation fault. An attacker could
possibly use this issue to cause libde265 to crash, resultin
Ubuntu
libde265 vulnerability
vendor_ubuntu·2024-05-07
CVE-2023-51792 libde265 vulnerability
Title: libde265 vulnerability
Summary: libde265 could be made to crash if it opened a specially crafted
file.
It was discovered that libde265 could be made to allocate memory that
exceeds the maximum supported size. If a user or automated system were
tricked into opening a specially crafted file, an attacker could possibly
use this issue to cause a denial of service.
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2023-51792: libde265 - Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cau...
vendor_debian·2023·CVSS 3.3
CVE-2023-51792 [LOW] CVE-2023-51792: libde265 - Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cau...
Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 1.0.13-1)
sid: resolved (fixed in 1.0.13-1)
trixie: resolved (fixed in 1.0.13-1)
GHSA
GHSA-xj57-m8w7-83wf: Buffer Overflow vulnerability in libde265 v1
ghsa_unreviewed·2024-04-19
CVE-2023-51792 [LOW] CWE-121 GHSA-xj57-m8w7-83wf: Buffer Overflow vulnerability in libde265 v1
Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.
OSV
CVE-2023-51792: Buffer Overflow vulnerability in libde265 v1
osv·2024-04-19·CVSS 3.3
CVE-2023-51792 [LOW] CVE-2023-51792: Buffer Overflow vulnerability in libde265 v1
Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/strukturag/libde265https://github.com/strukturag/libde265/issues/427https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/https://github.com/strukturag/libde265https://github.com/strukturag/libde265/issues/427https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/https://lists.fedoraproject.org/archives/list/[email protected]/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/https://lists.fedoraproject.org/archives/list/[email protected]/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/https://lists.fedoraproject.org/archives/list/[email protected]/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
2024-04-19
Published