CVE-2024-38950: Buffer Overflow
Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to interceptormemcpy function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.11-1+deb12u3 - Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.15-1+deb13u1 - Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.1.1-1 - Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.11-1+deb12u3Fixed in 1.0.15-1+deb13u2Fixed in 1.1.3-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38950?
CVE-2024-38950 has a high severity level due to its potential to cause application crashes.
How do I fix CVE-2024-38950?
To fix CVE-2024-38950, upgrade to a patched version of Libde265 that addresses this heap buffer overflow vulnerability.
What software is affected by CVE-2024-38950?
CVE-2024-38950 affects Libde265 version 1.0.15 specifically.
Can CVE-2024-38950 be exploited remotely?
Yes, CVE-2024-38950 can potentially be exploited remotely via crafted payloads.
What is the impact of CVE-2024-38950 on system security?
The impact of CVE-2024-38950 includes application instability and potential denial of service due to crashes.