CVE-2023-24751

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.77% chance of exploitation in the next 30 days, 53th percentile

Published

2023-03-01

Updated

2025-03-07

Proof-of-concept exploits (1)

• strukturag/libde265/issues/379

References

• CVE Record
• NVD entry

Related

• CVE-2023-2475
• CVE-2023-24752
• CVE-2023-2474
• CVE-2023-24754
• CVE-2023-24737
• CVE-2023-24755