CVE-2024-38949: Buffer Overflow
Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to display444as420 function at sdl.cc
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.11-1+deb12u3 - Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.15-1+deb13u1 - Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.1.1-1 - Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.11-1+deb12u3Fixed in 1.0.15-1+deb13u2Fixed in 1.1.3-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38949?
CVE-2024-38949 has a severity rating that indicates it can cause application crashes due to a heap buffer overflow.
How do I fix CVE-2024-38949?
To fix CVE-2024-38949, update Libde265 to a version newer than 1.0.15 where the vulnerability is patched.
What exploits are possible with CVE-2024-38949?
CVE-2024-38949 allows attackers to crash applications by sending crafted payloads to the display444as420 function.
Which versions of Libde265 are affected by CVE-2024-38949?
CVE-2024-38949 specifically affects Libde265 version 1.0.15.
What components of Libde265 does CVE-2024-38949 affect?
CVE-2024-38949 affects the sdl.cc component within Libde265.