CVE Vulnerabilities

CVE-2023-27102

NULL Pointer Dereference

Published: Mar 15, 2023 | Modified: Nov 21, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

NameVendorStart VersionEnd Version
Libde265Struktur1.0.11 (including)1.0.11 (including)
Libde265Ubuntubionic*
Libde265Ubuntuesm-apps/bionic*
Libde265Ubuntuesm-apps/focal*
Libde265Ubuntuesm-apps/jammy*
Libde265Ubuntuesm-apps/xenial*
Libde265Ubuntufocal*
Libde265Ubuntujammy*
Libde265Ubuntukinetic*
Libde265Ubuntulunar*
Libde265Ubuntutrusty*
Libde265Ubuntuxenial*

Potential Mitigations

References