{
  "fix": "libde265-0 1.0.2-2ubuntu0.18.04.1~esm3",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libde265-0-1.0.2-2ubuntu0.18.04.1-esm3",
  "summary": "libde265-0 1.0.2-2ubuntu0.18.04.1~esm3, released March 3, 2023, fixes 12 CVEs in libde265-0. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "libde265-0 1.0.2-2ubuntu0.18.04.1~esm3 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2023-03-03T07:15:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2023-25221, high severity",
  "supported": false,
  "cveCount": 12,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.0114,
  "maxCvss": 7.8,
  "appliesTo": [
    {
      "product": "libde265-0",
      "productUrl": "https://patchblox.com/security/product/linux/libde265-0",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.0.2-2ubuntu0.18.04.1~esm3",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2023-25221",
      "url": "https://patchblox.com/security/cve/CVE-2023-25221",
      "title": "libde265: Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_pre...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00333,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-47665",
      "url": "https://patchblox.com/security/cve/CVE-2022-47665",
      "title": "libde265-0: Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.00325,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43244",
      "url": "https://patchblox.com/security/cve/CVE-2022-43244",
      "title": "libde265-examples: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_qpel_fallback\u0026lt;unsigned shor...",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43245",
      "url": "https://patchblox.com/security/cve/CVE-2022-43245",
      "title": "libde265-0: Libde265 v1.0.8 was discovered to contain a segmentation violation via apply_sao_internal\u0026lt;unsigned short\u0026gt; in sa...",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43249",
      "url": "https://patchblox.com/security/cve/CVE-2022-43249",
      "title": "libde265-0: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_epel_hv_fallback\u0026lt;unsigned s...",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43250",
      "url": "https://patchblox.com/security/cve/CVE-2022-43250",
      "title": "libde265-0: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_qpel_0_0_fallback_16 in fallba...",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-24751",
      "url": "https://patchblox.com/security/cve/CVE-2023-24751",
      "title": "libde265: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00774,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-24752",
      "url": "https://patchblox.com/security/cve/CVE-2023-24752",
      "title": "libde265: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse funct...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00292,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-24754",
      "url": "https://patchblox.com/security/cve/CVE-2023-24754",
      "title": "libde265: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse func...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00292,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-24756",
      "url": "https://patchblox.com/security/cve/CVE-2023-24756",
      "title": "libde265: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse functi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00292,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-24757",
      "url": "https://patchblox.com/security/cve/CVE-2023-24757",
      "title": "libde265: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_unweighted_pred_16_fallback function...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00292,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-24758",
      "url": "https://patchblox.com/security/cve/CVE-2023-24758",
      "title": "libde265: libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse func...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00292,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-12T19:57:06Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}