Strukturag Libde265 vulnerabilities

2 known vulnerabilities affecting strukturag/libde265.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2026-33164HIGHCVSS 8.7fixed in 1.0.172026-03-20

CVE-2026-33164 [HIGH] CWE-122 CVE-2026-33164: libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malfo libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in pic_parameter_set::set_derived_values(). This issue has been patched in version 1.0.17.

CVE-2026-33165MEDIUMCVSS 5.0fixed in 1.0.172026-03-20

CVE-2026-33165 [MEDIUM] CWE-787 CVE-2026-33165: libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a craft libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a crafted HEVC bitstream causes an out-of-bounds heap write confirmed by AddressSanitizer. The trigger is a stale ctb_info.log2unitSize after an SPS change where PicWidthInCtbsY and PicHeightInCtbsY stay constant but Log2CtbSizeY changes, causing set_SliceHe