CVE-2026-49346

Name of the Vulnerable Software and Affected Versions libde265 versions prior to 1.1.0

Description An issue exists in the h.265 video codec implementation where a crafted H.265 bitstream containing large SPS dimensions and 16-bit bit depth triggers a signed integer overflow in the de265 image get buffer() function. This overflow results in the plane allocation size being wrapped to a small value of approximately 1 KB. Subsequently, the fill image() function calculates the actual size using size t, leading to approximately 4 GB of data being written into the undersized heap buffer, which can cause a denial of service.

Recommendations Update to version 1.1.0.