CVE-2020-21602 - libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_bipred_16_fallback function, which can be exploited via a crafted a file

MEDIUM

libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_bipred_16_fallback function, which can be exploited via a crafted a file

Published Sep 16, 2021

6.5

MEDIUM

CVSS 3.1

EPSS 1.44%

libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_bipred_16_fallback function, which can be exploited via a crafted a file.

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

Link	Providers	Tags
https://cwe.mitre.org/data/definitions/122.html		Technical Description
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-14370		Advisory
https://github.com/strukturag/libde265/issues/242		ExploitIssue TrackingThird Party Advisory
https://www.debian.org/security/2023/dsa-5346		vendor-advisory