Alpine/libde265: high 8.8

Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc.

Action: Upgrade libde265 to 1.0.11-r1 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2023-27103#Alpine:v3.15/libde265
• https://security.alpinelinux.org/vuln/CVE-2023-27103

published 2023-03-15T15:15:09.670Z · modified 2026-10-23T17:17:56.724005683Z · JSON