CVE-2022-47665: Buffer Overflow
Libde265 1.0.9 has a heap buffer overflow vulnerability in de265image::setSliceAddrRS(int, int, int)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libde265to a version that resolves this vulnerability.Fixed in 1.0.2-2ubuntu0.18.04.1~ - Upgrade
Upgrade
ubuntu/libde265to a version that resolves this vulnerability.Fixed in 1.0.4-1ubuntu0.3 - Upgrade
Upgrade
ubuntu/libde265to a version that resolves this vulnerability.Fixed in 1.0.8-1ubuntu0.2 - Upgrade
Upgrade
ubuntu/libde265to a version that resolves this vulnerability.Fixed in 1.0.10 - Upgrade
Upgrade
ubuntu/libde265to a version that resolves this vulnerability.Fixed in 1.0.2-2ubuntu0.16.04.1~ - Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.11-1+deb12u2Fixed in 1.0.11-1+deb12u3Fixed in 1.0.15-1+deb13u2Fixed in 1.1.3-1 - Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.11-1
Event History
Frequently Asked Questions
What is CVE-2022-47665?
CVE-2022-47665 is a heap buffer overflow vulnerability in Libde265 version 1.0.9.
How severe is CVE-2022-47665?
CVE-2022-47665 has a severity of 7.8 (high).
How does CVE-2022-47665 affect the software?
CVE-2022-47665 affects Struktur Libde265 version 1.0.9.
Is there a fix available for CVE-2022-47665?
Currently, no official fix has been released for CVE-2022-47665. It is recommended to update to a newer version or apply patches once available.
Where can I find more information about CVE-2022-47665?
You can find more information about CVE-2022-47665 at the following link: [GitHub - Libde265 Issue #369](https://github.com/strukturag/libde265/issues/369)