What’s Vulnerable › Vulnerabilities

CVE-2025-61147

• Severity: medium (CVSS 6.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-02-23 · updated 2026-06-17
• Weakness: CWE-120

Description

strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decoder_context::compute_framedrop_table().

Affected products

• strukturag libde265: before 1.0.17 — fixed in 1.0.17

How to fix

Upgrade to a fixed version: strukturag libde265 1.0.17. Check the vendor advisory for mitigations.

References

• https://gist.github.com/optionGo/e6567a1c2bc4e0c9fee4e1e8be8d6af9
• https://github.com/strukturag/libde265/commit/8b17e0930f77db07f55e0b89399a8f054ddbecf7
• https://github.com/strukturag/libde265/issues/484

Get alerted when CVE-2025-61147 or the next vulnerability affects your stack