CVE-2022-47664: Buffer Overflow
Published Mar 3, 2023
·Updated
Libde265 1.0.9 is vulnerable to Buffer Overflow in ffhevcputhevcqpelpixels8sse
Affected Software
5 affected componentsFixes available
struktur libde265=1.0.9
debian/libde265<1.0.11-1
1.0.11-1
debian/libde265<1.0.11-1
1.0.11-1
debian/libde265<1.0.11-1
1.0.11-1
debian/libde265
1.0.11-1+deb12u21.0.11-1+deb12u31.0.15-1+deb13u21.1.3-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.11-1+deb12u2Fixed in 1.0.11-1+deb12u3Fixed in 1.0.15-1+deb13u2Fixed in 1.1.3-1 - Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.11-1
Event History
Mar 3, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via OSV·03:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2022-47664.
2
What is the severity of CVE-2022-47664?
The severity of CVE-2022-47664 is high (7.8).
3
What is the affected software of CVE-2022-47664?
The affected software of CVE-2022-47664 is Struktur Libde265 version 1.0.9.
4
What is the description of CVE-2022-47664?
CVE-2022-47664 is a buffer overflow vulnerability in Libde265 1.0.9, specifically in the ff_hevc_put_hevc_qpel_pixels_8_sse function.
5
How can I fix CVE-2022-47664?
To fix CVE-2022-47664, it is recommended to update Libde265 to a version that includes the patch for the buffer overflow vulnerability.