{
  "fix": "libde265-examples 1.0.4-1ubuntu0.2",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libde265-examples-1.0.4-1ubuntu0.2",
  "summary": "libde265-examples 1.0.4-1ubuntu0.2, released November 2, 2022, fixes 16 CVEs in libde265-examples. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "libde265-examples 1.0.4-1ubuntu0.2 for Ubuntu 20.04 LTS (focal)",
  "released": "2022-11-02T07:15:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2021-36409, high severity",
  "supported": false,
  "cveCount": 16,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.0142,
  "maxCvss": 7.8,
  "appliesTo": [
    {
      "product": "libde265-examples",
      "productUrl": "https://patchblox.com/security/product/linux/libde265-examples",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.0.4-1ubuntu0.2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2021-36409",
      "url": "https://patchblox.com/security/cve/CVE-2021-36409",
      "title": "libde265: There is an Assertion \u0060scaling_list_pred_matrix_id_delta==1\u0027 failed at sps.cc:925 in libde265 v1.0.8 when decoding fi...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00965,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-35452",
      "url": "https://patchblox.com/security/cve/CVE-2021-35452",
      "title": "libde265: An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-36411",
      "url": "https://patchblox.com/security/cve/CVE-2021-36411",
      "title": "libde265: An issue has been found in libde265 v1.0.8 due to incorrect access control",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.01242,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43236",
      "url": "https://patchblox.com/security/cve/CVE-2022-43236",
      "title": "libde265: Libde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via put_qpel_fallback\u003Cunsigned short\u003E...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.01157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43237",
      "url": "https://patchblox.com/security/cve/CVE-2022-43237",
      "title": "libde265: Libde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via void put_epel_hv_fallback\u003Cunsigne...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.01157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43238",
      "url": "https://patchblox.com/security/cve/CVE-2022-43238",
      "title": "libde265: Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_h_3_v_3_sse in sse-motion.cc",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.01157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43242",
      "url": "https://patchblox.com/security/cve/CVE-2022-43242",
      "title": "libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_luma\u003Cunsigned char\u003E in motion.cc",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.01157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43239",
      "url": "https://patchblox.com/security/cve/CVE-2022-43239",
      "title": "libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_chroma\u003Cunsigned short\u003E in motio...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43240",
      "url": "https://patchblox.com/security/cve/CVE-2022-43240",
      "title": "libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_hevc_qpel_h_2_v_1_sse...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43241",
      "url": "https://patchblox.com/security/cve/CVE-2022-43241",
      "title": "libde265: Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_v_3_8_sse in sse-motion.cc",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43243",
      "url": "https://patchblox.com/security/cve/CVE-2022-43243",
      "title": "libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_weighted_pred_avg_8_ss...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43248",
      "url": "https://patchblox.com/security/cve/CVE-2022-43248",
      "title": "libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_weighted_pred_avg_16_fallback...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43252",
      "url": "https://patchblox.com/security/cve/CVE-2022-43252",
      "title": "libde265-0: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_epel_16_fallback in fallback-m...",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43253",
      "url": "https://patchblox.com/security/cve/CVE-2022-43253",
      "title": "libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_unweighted_pred_16_fallback in...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-43235",
      "url": "https://patchblox.com/security/cve/CVE-2022-43235",
      "title": "libde265-examples: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_hevc_epel_pixels_8_sse...",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.01116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-36410",
      "url": "https://patchblox.com/security/cve/CVE-2021-36410",
      "title": "libde265: A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when runnin...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00924,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-12T13:55:20Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}