CVE-2026-45382: CWE-125: Out-of-bounds Read in strukturag libde265
A heap-buffer-overflow read vulnerability exists in libde265 versions prior to 1.0.19 in the function decoder_context::decode_slice_unit_tiles. The issue arises when a malformed PPS encodes geometry inconsistent with the SPS, causing an out-of-bounds read of a 4-byte buffer. This vulnerability has a CVSS score of 6.9 (medium severity). Version 1.0.19 addresses this issue.
AI Analysis
Technical Summary
libde265, an open source H.265 video codec implementation, has an out-of-bounds read vulnerability (CWE-125) in versions before 1.0.19. The vulnerability occurs in decoder_context::decode_slice_unit_tiles where the index ctbAddrRS, computed from PPS-supplied colBd[]/rowBd[] arrays, is not validated against the size of CtbAddrRStoTS. A malformed PPS that passes set_derived_values but encodes geometry inconsistent with the SPS can cause ctbAddrRS to exceed the allocated buffer size, leading to a 4-byte heap-buffer-overflow read. This issue is fixed in version 1.0.19.
Potential Impact
An attacker can craft a malformed PPS that triggers an out-of-bounds read of heap memory, potentially leading to information disclosure or application instability. There is no indication of remote code execution or privilege escalation. The vulnerability is exploitable remotely without authentication and requires no user interaction.
Mitigation Recommendations
Upgrade libde265 to version 1.0.19 or later, which fixes this out-of-bounds read vulnerability. No other mitigation or workaround is indicated. Patch status is not explicitly stated in the vendor advisory, but the description confirms the issue is fixed in 1.0.19.
CVE-2026-45382: CWE-125: Out-of-bounds Read in strukturag libde265
Description
A heap-buffer-overflow read vulnerability exists in libde265 versions prior to 1.0.19 in the function decoder_context::decode_slice_unit_tiles. The issue arises when a malformed PPS encodes geometry inconsistent with the SPS, causing an out-of-bounds read of a 4-byte buffer. This vulnerability has a CVSS score of 6.9 (medium severity). Version 1.0.19 addresses this issue.
CVSS v4.0
Score 6.9medium
Affected software
pkg:github/strukturag/libde265Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
libde265, an open source H.265 video codec implementation, has an out-of-bounds read vulnerability (CWE-125) in versions before 1.0.19. The vulnerability occurs in decoder_context::decode_slice_unit_tiles where the index ctbAddrRS, computed from PPS-supplied colBd[]/rowBd[] arrays, is not validated against the size of CtbAddrRStoTS. A malformed PPS that passes set_derived_values but encodes geometry inconsistent with the SPS can cause ctbAddrRS to exceed the allocated buffer size, leading to a 4-byte heap-buffer-overflow read. This issue is fixed in version 1.0.19.
Potential Impact
An attacker can craft a malformed PPS that triggers an out-of-bounds read of heap memory, potentially leading to information disclosure or application instability. There is no indication of remote code execution or privilege escalation. The vulnerability is exploitable remotely without authentication and requires no user interaction.
Mitigation Recommendations
Upgrade libde265 to version 1.0.19 or later, which fixes this out-of-bounds read vulnerability. No other mitigation or workaround is indicated. Patch status is not explicitly stated in the vendor advisory, but the description confirms the issue is fixed in 1.0.19.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-12T00:51:29.087Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a5fdfa79c2644c7f8c1b04b
Added to database: 07/21/2026, 21:07:51 UTC
Last enriched: 07/30/2026, 05:14:59 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 12
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.