CVE-2022-47664

Name of the Vulnerable Software and Affected Versions Libde265 version 1.0.9

Description The issue is related to a buffer overflow in the ff hevc put hevc qpel pixels 8 sse function of the Libde265 h.265 video codec implementation. This vulnerability is caused by copying a buffer without checking the size of the input data. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Libde265 version 1.0.9, update to version 1.0.11 to fix the security issues. As a temporary workaround, consider disabling the ff hevc put hevc qpel pixels 8 sse function until a patch is available.