CVE-2023-24751

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2023-03-01

Last modified

2025-03-07

Weaknesses

CWE-476

Affected products

• Debian Linux (Debian)
• Libde265 (Struktur)

References

• https://github.com/strukturag/libde265/issues/379
• https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html