CVE-2023-24756

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.29% chance of exploitation in the next 30 days, 21th percentile

Published

2023-03-01

Updated

2025-03-07

Proof-of-concept exploits (1)

• strukturag/libde265/issues/380

References

• CVE Record
• NVD entry

Related

• CVE-2023-24755
• CVE-2023-24757
• CVE-2023-24754
• CVE-2023-24758
• CVE-2023-24752
• CVE-2023-2476