CVE-2023-24752

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cve@mitre.org

Published

2023-03-01

Last modified

2025-03-07

Weaknesses

CWE-476

Affected products

• Debian Linux (Debian)
• Libde265 (Struktur)

References

• https://github.com/strukturag/libde265/issues/378
• https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html