CVE catalog

CVE-2022-43242

libde265: CVE-2022-43242

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.92% · Oct 25, 2026

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_luma<unsigned char> in motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibde265sid1.1.3-1fixed
Debianlibde265forky1.1.3-1fixed
Debianlibde265trixie1.0.15-1+deb13u2fixed
Debianlibde265trixie-security1.0.15-1+deb13u2fixed
Debianlibde265bookworm1.0.11-1+deb12u2fixed
Debianlibde265bookworm-security1.0.11-1+deb12u3fixed
Ubuntulibde265pro1.0.2-2build1vulnerable
Ubuntulibde265pro1.0.2-2ubuntu0.18.04.1~esm1vulnerable
Ubuntulibde265pro1.0.2-2ubuntu0.18.04.1~esm2fixed
Ubuntulibde26520.041.0.3-1build1vulnerable
Ubuntulibde26520.041.0.4-1vulnerable
Ubuntulibde26520.041.0.4-1build1vulnerable
Ubuntulibde26520.041.0.4-1ubuntu0.1vulnerable
Ubuntulibde26520.041.0.4-1ubuntu0.2fixed
Ubuntulibde26522.041.0.8-1vulnerable
Ubuntulibde26522.041.0.8-1ubuntu0.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibde265sourcesid1.0.9-1.1not yet assignedNot reported[1027179]
Debianlibde265sourceforky1.0.9-1.1not yet assignedNot reported[1027179]
Debianlibde265sourcetrixie1.0.9-1.1not yet assignedNot reported[1027179]
Debianlibde265sourcebookworm1.0.9-1.1not yet assignedNot reported[1027179]
Ubuntulibde265debpro1.0.2-2ubuntu0.18.04.1~esm2Not reportedUBUNTU-CVE-2022-43242Not reported
Ubuntulibde265deb20.041.0.4-1ubuntu0.2Not reportedUBUNTU-CVE-2022-43242Not reported
Ubuntulibde265deb22.041.0.8-1ubuntu0.1Not reportedUBUNTU-CVE-2022-43242Not reported

[Debian bug #1027179]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libde265-0]Unknown

    Source package: [libde265]

    Details (2)

    • 1.0.11-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1.0.9-1.1

      dsa · libde265 · debian · bookworm

    • 1.0.11-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1.0.9-1.1

      dsa · libde265 · debian · bookworm

  • [libde265-dev]Unknown

    Source package: [libde265]

    Details (2)

    • 1.0.11-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1.0.9-1.1

      dsa · libde265 · debian · bookworm

    • 1.0.11-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1.0.9-1.1

      dsa · libde265 · debian · bookworm

  • [libde265-examples]Unknown

    Source package: [libde265]

    Details (2)

    • 1.0.11-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1.0.9-1.1

      dsa · libde265 · debian · bookworm

    • 1.0.11-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1.0.9-1.1

      dsa · libde265 · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]