# libde265-examples 1.0.8-1ubuntu0.1: libde265-examples 1.0.8-1ubuntu0.1 for Ubuntu 22.04.1 LTS (jammy)

libde265-examples 1.0.8-1ubuntu0.1, released November 2, 2022, fixes 18 CVEs in libde265-examples. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-jammy-libde265-examples-1.0.8-1ubuntu0.1
- Platform: Linux
- Released: Nov 2, 2022
- Priority: Urgent (Closes CVE-2022-1253, rated Critical)
- CVEs: 18, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [libde265-examples](https://patchblox.com/security/data/product/linux/libde265-examples.md) | Ubuntu 22.04.1 LTS (jammy) | 1.0.8-1ubuntu0.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-1253](https://patchblox.com/security/data/cve/CVE-2022-1253.md) | Urgent | libde265: Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8 | 9.8 | 0.0205 |  |
| [CVE-2021-36409](https://patchblox.com/security/data/cve/CVE-2021-36409.md) | High | libde265: There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding fi... | 7.8 | 0.0097 |  |
| [CVE-2021-35452](https://patchblox.com/security/data/cve/CVE-2021-35452.md) | Routine | libde265: An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc. | 6.5 | 0.0142 |  |
| [CVE-2021-36411](https://patchblox.com/security/data/cve/CVE-2021-36411.md) | Routine | libde265: An issue has been found in libde265 v1.0.8 due to incorrect access control | 5.5 | 0.0124 |  |
| [CVE-2022-43236](https://patchblox.com/security/data/cve/CVE-2022-43236.md) | Routine | libde265: Libde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via put_qpel_fallback<unsigned short>... | 6.5 | 0.0116 |  |
| [CVE-2022-43237](https://patchblox.com/security/data/cve/CVE-2022-43237.md) | Routine | libde265: Libde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via void put_epel_hv_fallback<unsigne... | 6.5 | 0.0116 |  |
| [CVE-2022-43238](https://patchblox.com/security/data/cve/CVE-2022-43238.md) | Routine | libde265: Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_h_3_v_3_sse in sse-motion.cc | 6.5 | 0.0116 |  |
| [CVE-2022-43242](https://patchblox.com/security/data/cve/CVE-2022-43242.md) | Routine | libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_luma<unsigned char> in motion.cc | 6.5 | 0.0116 |  |
| [CVE-2022-43239](https://patchblox.com/security/data/cve/CVE-2022-43239.md) | Routine | libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_chroma<unsigned short> in motio... | 6.5 | 0.0114 |  |
| [CVE-2022-43240](https://patchblox.com/security/data/cve/CVE-2022-43240.md) | Routine | libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_hevc_qpel_h_2_v_1_sse... | 6.5 | 0.0114 |  |
| [CVE-2022-43241](https://patchblox.com/security/data/cve/CVE-2022-43241.md) | Routine | libde265: Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_v_3_8_sse in sse-motion.cc | 6.5 | 0.0114 |  |
| [CVE-2022-43243](https://patchblox.com/security/data/cve/CVE-2022-43243.md) | Routine | libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_weighted_pred_avg_8_ss... | 6.5 | 0.0114 |  |
| [CVE-2022-43248](https://patchblox.com/security/data/cve/CVE-2022-43248.md) | Routine | libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_weighted_pred_avg_16_fallback... | 6.5 | 0.0114 |  |
| [CVE-2022-43252](https://patchblox.com/security/data/cve/CVE-2022-43252.md) | Routine | libde265-0: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_epel_16_fallback in fallback-m... | 6.5 | 0.0114 |  |
| [CVE-2022-43253](https://patchblox.com/security/data/cve/CVE-2022-43253.md) | Routine | libde265: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_unweighted_pred_16_fallback in... | 6.5 | 0.0114 |  |
| [CVE-2022-43235](https://patchblox.com/security/data/cve/CVE-2022-43235.md) | Routine | libde265-examples: Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_hevc_epel_pixels_8_sse... | 6.5 | 0.0112 |  |
| [CVE-2021-36410](https://patchblox.com/security/data/cve/CVE-2021-36410.md) | Routine | libde265: A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when runnin... | 5.5 | 0.0092 |  |
| [CVE-2021-36408](https://patchblox.com/security/data/cve/CVE-2021-36408.md) | Routine | libde265: An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec... | 5.5 | 0.0090 |  |

---

Data as of 2026-11-12T07:53:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.