Strukturag Libde265 vulnerabilities

CVE-2026-54240 [HIGH] CWE-190 CVE-2026-54240: libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use sign libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially disclosing data, corrupting memory, or crashing the deco

CVE-2026-54241 [HIGH] CWE-122 CVE-2026-54241: libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use sign libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an undersized allocation, and an out-of-bounds heap read that may

CVE-2026-45383 [MEDIUM] CWE-125 CVE-2026-45383: libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow (out-of-bounds READ) exists in `decoder_context::decode_slice_unit_WPP()` in `libde265/decctx.cc`. When decoding a WPP (Wavefront Parallel Processing) HEVC slice, `ctbAddrRS` is computed as `ctbRow * ctbsWidth` inside the entry-poi

CVE-2026-45382 [MEDIUM] CWE-125 CVE-2026-45382: libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decode libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrRStoTS[ctbAddrRS]` at line 966 where `ctbAddrRS = ctbY * ctbsWidth + ctbX` is computed from PPS-supplied `colBd[]`/`rowBd[]` arrays without validating the result against `C

CVE-2026-33164 [HIGH] CWE-122 CVE-2026-33164: libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malfo libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in pic_parameter_set::set_derived_values(). This issue has been patched in version 1.0.17.

CVE-2026-49346 [HIGH] CWE-190 CVE-2026-49346: libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafte libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit depth causes a signed integer overflow in `de265_image_get_buffer()` (`libde265/image.cc:128`). The overflow wraps the plane allocation size to a small value (~1 KB), but the subsequent `fill_im

CVE-2026-49295 [HIGH] CWE-787 CVE-2026-49295: libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a craft libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in `decoder_context::process_reference_picture_set()` (`libde265/decctx.cc:1376`). The root cause is a missing aggregate bound check on predicted short-term reference picture set entries. Individ

CVE-2026-33165 [MEDIUM] CWE-787 CVE-2026-33165: libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a craft libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a crafted HEVC bitstream causes an out-of-bounds heap write confirmed by AddressSanitizer. The trigger is a stale ctb_info.log2unitSize after an SPS change where PicWidthInCtbsY and PicHeightInCtbsY stay constant but Log2CtbSizeY changes, causing set_SliceHe

CVE-2026-49337 [MEDIUM] CWE-770 CVE-2026-49337: libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a craft libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted sequence of H.265 NAL units causes `decoder_context::read_slice_NAL()` (`libde265/decctx.cc:481`) to attach slice headers to a finished picture object that has no active image unit, resulting in attacker-controlled unbounded heap growth. The retain