CVE-2022-47665

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Libde265 version 1.0.9

Description The issue is related to a heap buffer overflow in the de265 image::set SliceAddrRS(int, int, int) function of the Libde265 video codec. This can potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Libde265 version 1.0.9, update to version 1.0.11 to fix the security issues. As a temporary workaround, consider disabling the de265 image::set SliceAddrRS(int, int, int) function until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors