CVE-2024-38950

Published: 26 June 2024

Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to __interceptor_memcpy function.

Notes

as of 2024-08-16, there is no fix available from libde265
developers

Status

References

• https://www.cve.org/CVERecord?id=CVE-2024-38950
• https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-38950
• NVD
• Launchpad
• Debian

Bugs

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1074416
• https://github.com/strukturag/libde265/issues/460