CVE-2023-25221

Description

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function in motion.cc.

Affected Platforms

Weakness Type

CWE-787

References

• https://github.com/strukturag/libde265/issues/388
• https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html
• https://github.com/strukturag/libde265/issues/388
• https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html