Filtered by vendor Struktur Subscriptions
Total 66 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-25269 2 Libheif, Struktur 2 Libheif, Libheif 2025-04-16 7.5 High
libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service attack.
CVE-2025-29482 1 Struktur 1 Libheif 2025-04-15 6.2 Medium
Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO (Sample Adaptive Offset) processing of libde265.
CVE-2022-47655 2 Debian, Struktur 2 Debian Linux, Libde265 2025-04-10 7.8 High
Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback<unsigned short>
CVE-2024-41311 2 Debian, Struktur 2 Debian Linux, Libheif 2025-03-24 8.1 High
In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.
CVE-2023-0996 1 Struktur 1 Libheif 2025-03-11 7.8 High
There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call.
CVE-2023-24758 2 Debian, Struktur 2 Debian Linux, Libde265 2025-03-07 5.5 Medium
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
CVE-2023-24756 2 Debian, Struktur 2 Debian Linux, Libde265 2025-03-07 5.5 Medium
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
CVE-2023-24755 2 Debian, Struktur 2 Debian Linux, Libde265 2025-03-07 5.5 Medium
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_weighted_pred_8_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
CVE-2023-24754 2 Debian, Struktur 2 Debian Linux, Libde265 2025-03-07 5.5 Medium
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
CVE-2023-24751 2 Debian, Struktur 2 Debian Linux, Libde265 2025-03-07 6.5 Medium
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
CVE-2023-24752 2 Debian, Struktur 2 Debian Linux, Libde265 2025-03-07 5.5 Medium
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
CVE-2023-25221 2 Debian, Struktur 2 Debian Linux, Libde265 2025-03-07 7.8 High
Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function in motion.cc.
CVE-2022-47665 1 Struktur 1 Libde265 2025-03-07 7.8 High
Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int)
CVE-2022-47664 1 Struktur 1 Libde265 2025-03-07 7.8 High
Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse
CVE-2023-24757 2 Debian, Struktur 2 Debian Linux, Libde265 2025-03-07 5.5 Medium
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_unweighted_pred_16_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
CVE-2023-29659 2 Fedoraproject, Struktur 2 Fedora, Libheif 2025-01-29 6.5 Medium
A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.
CVE-2023-43887 1 Struktur 1 Libde265 2024-11-26 8.1 High
Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the num_tile_columns and num_tile_row parameters in the function pic_parameter_set::dump.
CVE-2023-49462 1 Struktur 1 Libheif 2024-11-26 8.8 High
libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc.
CVE-2023-49468 1 Struktur 1 Libde265 2024-11-21 8.8 High
Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at slice.cc.
CVE-2023-49467 1 Struktur 1 Libde265 2024-11-21 8.8 High
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates function at motion.cc.