CVE-2023-43887

Name of the Vulnerable Software and Affected Versions Libde265 version 1.0.12

Description The issue is related to a buffer overflow in the pic parameter set::dump() function of the h.265 Libde265 video codec, specifically through the num tile columns and num tile row parameters. This could allow a remote attacker to disclose protected information or cause a denial of service.

Recommendations For Libde265 version 1.0.12, consider disabling the pic parameter set::dump() function until a patch is available to prevent exploitation of the buffer overflow vulnerability via the num tile columns and num tile row parameters.