https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T14:03:05.811037+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-13664 bdu:2026-13664 2026-10-09T14:03:05.912707+00:00 bdu:2026-13664 https://cve.radiocsirt.org/vuln/bell-cve-2026-49346 BELL-CVE-2026-49346 2026-10-09T14:03:05.912749+00:00

Affected: Alpaquita:stream: libde265

 https://cve.radiocsirt.org/vuln/euvd-2026-328877 EUVD-2026-328877 2026-10-09T14:03:05.912788+00:00 EUVD-2026-328877 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49346 fkie_cve-2026-49346 2026-10-09T14:03:05.912802+00:00

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit depth causes a signed integer overflow in `de265_image_get_buffer()` (`libde265/image.cc:128`). The overflow wraps the plane allocation size to a small value (~1 KB), but the subsequent `fill_image()` call computes the real size using `size_t`, writing ~4 GB into the undersized heap buffer. Version 1.1.0 patches the issue.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-49346 UBUNTU-CVE-2026-49346 2026-10-09T14:03:05.912830+00:00

Affected: Ubuntu:Pro:16.04:LTS: libde265, Ubuntu:Pro:18.04:LTS: libde265, Ubuntu:Pro:20.04:LTS: libde265, Ubuntu:Pro:22.04:LTS: libde265, Ubuntu:24.04:LTS: libde265, Ubuntu:25.10: libde265, Ubuntu:Pro:26.04:LTS: libde265

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit depth causes a signed integer overflow in `de265_image_get_buffer()` (`libde265/image.cc:128`). The overflow wraps the plane allocation size to a small value (~1 KB), but the subsequent `fill_image()` call computes the real size using `size_t`, writing ~4 GB into the undersized heap buffer. Version 1.1.0 patches the issue.