What’s Vulnerable › Vulnerabilities

CVE-2022-1253: Heap-based Buffer Overflow in strukturag/libde265

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-04-06 · updated 2026-06-17
• Weakness: CWE-122

Description

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.

Affected products

• strukturag libde265: through 1.0.8

References

• https://github.com/strukturag/libde265/commit/8e89fe0e175d2870c39486fdd09250b230ec10b8
• https://huntr.dev/bounties/1-other-strukturag/libde265
• https://www.debian.org/security/2023/dsa-5346
• https://github.com/strukturag/libde265/commit/8e89fe0e175d2870c39486fdd09250b230ec10b8
• https://huntr.dev/bounties/1-other-strukturag/libde265
• https://www.debian.org/security/2023/dsa-5346

Get alerted when CVE-2022-1253 or the next vulnerability affects your stack