PT-2019-6188

CVE-2020-21605

·

Publicado

2019-12-24

·

Atualizado

2026-10-31

Descrição por

CVSS 2.0
7.8
Alta
MétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions libde265 version 1.0.4
Description The issue is related to a segmentation fault in the apply sao internal function, which can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service. The vulnerability is associated with a buffer overflow in memory.
Recommendations For libde265 version 1.0.4, consider disabling the apply sao internal function as a temporary workaround until a patch is available. Restrict access to crafted files that could exploit this issue to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
ALT-PU-2020-1410
CLEANSTART-2023-LA44968
DLA-3240-1
DSA-5346-1
MGASA-2023-0093
USN-6617-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾