CVE-2022-1253: Heap-based Buffer Overflow in strukturag/libde265
Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-1253?
CVE-2022-1253 is a heap-based buffer overflow vulnerability in the GitHub repository strukturag/libde265 prior to and including version 1.0.8.
What is the severity of CVE-2022-1253?
CVE-2022-1253 has a severity rating of 9.8 (Critical).
How can I fix CVE-2022-1253?
To fix CVE-2022-1253, you should update the libde265 package to a version that includes the fix, such as 1.0.11-1.
Where can I find more information about CVE-2022-1253?
You can find more information about CVE-2022-1253 at the following references: [Debian Security Tracker](https://security-tracker.debian.org/tracker/CVE-2022-1253), [Huntr.dev](https://huntr.dev/bounties/1-other-strukturag/libde265/), and [GitHub Commit](https://github.com/strukturag/libde265/commit/8e89fe0e175d2870c39486fdd09250b230ec10b8).
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-1253?
The CWE IDs associated with CVE-2022-1253 are 119, 122, and 787.