CVE-2023-24755: Null Pointer Dereference
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the putweightedpred8fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libde265to a version that resolves this vulnerability.Fixed in 1.0.4-1ubuntu0.3 - Upgrade
Upgrade
ubuntu/libde265to a version that resolves this vulnerability.Fixed in 1.0.8-1ubuntu0.2 - Upgrade
Upgrade
ubuntu/libde265to a version that resolves this vulnerability.Fixed in 1.0.11-1 - Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.11-1+deb12u2Fixed in 1.0.11-1+deb12u3Fixed in 1.0.15-1+deb13u2Fixed in 1.1.3-1
Event History
Frequently Asked Questions
What is CVE-2023-24755?
CVE-2023-24755 is a vulnerability in libde265 v1.0.10 that allows attackers to cause a Denial of Service (DoS) via a crafted input file.
How severe is CVE-2023-24755?
CVE-2023-24755 has a severity score of 5.5, which is considered medium.
How does CVE-2023-24755 affect Struktur Libde265?
Struktur Libde265 version 1.0.10 is affected by CVE-2023-24755.
How does CVE-2023-24755 affect Debian Debian Linux?
Debian Debian Linux version 10.0 is affected by CVE-2023-24755.
How can I fix CVE-2023-24755?
Currently, there is no known fix for CVE-2023-24755. It is recommended to update to a patched version of libde265 when it becomes available or apply any official patches provided by the vendor.