Alpine/libde265: high 8.8

Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function at motion.cc.

Action: Upgrade libde265 to 1.0.15-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2023-49465#Alpine:v3.21/libde265
• https://security.alpinelinux.org/vuln/CVE-2023-49465

published 2023-12-07T20:15:38.370Z · modified 2026-10-23T17:17:56.805608546Z · JSON