Vulnerabilities > CVE-2022-43238
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_h_3_v_3_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 | |
OS | 2 |
References
- https://github.com/strukturag/libde265/issues/336
- https://github.com/strukturag/libde265/issues/336
- https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html
- https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html
- https://www.debian.org/security/2023/dsa-5346
- https://www.debian.org/security/2023/dsa-5346