https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T18:43:59.729470+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2026-09387 bdu:2026-09387 2026-09-29T18:43:59.771030+00:00 bdu:2026-09387 https://vulnerability.circl.lu/vuln/fkie_cve-2026-33165 fkie_cve-2026-33165 2026-09-29T18:43:59.771099+00:00

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a crafted HEVC bitstream causes an out-of-bounds heap write confirmed by AddressSanitizer. The trigger is a stale ctb_info.log2unitSize after an SPS change where PicWidthInCtbsY and PicHeightInCtbsY stay constant but Log2CtbSizeY changes, causing set_SliceHeaderIndex to index past the allocated image metadata array and write 2 bytes past the end of a heap allocation. This issue has been patched in version 1.0.17.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-33165 UBUNTU-CVE-2026-33165 2026-09-29T18:43:59.771161+00:00

Affected: Ubuntu:Pro:16.04:LTS: libde265, Ubuntu:Pro:18.04:LTS: libde265, Ubuntu:Pro:20.04:LTS: libde265, Ubuntu:Pro:22.04:LTS: libde265, Ubuntu:24.04:LTS: libde265, Ubuntu:25.10: libde265, Ubuntu:Pro:26.04:LTS: libde265

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a crafted HEVC bitstream causes an out-of-bounds heap write confirmed by AddressSanitizer. The trigger is a stale ctb_info.log2unitSize after an SPS change where PicWidthInCtbsY and PicHeightInCtbsY stay constant but Log2CtbSizeY changes, causing set_SliceHeaderIndex to index past the allocated image metadata array and write 2 bytes past the end of a heap allocation. This issue has been patched in version 1.0.17.