Struktur vulnerabilities, page 2

89 vulnerabilities

Known vulnerabilities in Struktur products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

6.5CVE-2020-21605alpinelibde265+3
EPSS score
1.01%
libde265 v1.0.4 contains a segmentation fault in the apply_sao_internal function, which can be exploited via a crafted a file.
6.5CVE-2020-21601alpinelibde265+3
EPSS score
1.10%
libde265 v1.0.4 contains a stack buffer overflow in the put_qpel_fallback function, which can be exploited via a crafted a file.
6.5CVE-2020-21595alpinelibde265+3
EPSS score
1.10%
libde265 v1.0.4 contains a heap buffer overflow in the mc_luma function, which can be exploited via a crafted a file.
8.8CVE-2020-19499debianlibheif+1
EPSS score
1.37%
An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read.
8.8CVE-2020-19498debianlibheif+1
EPSS score
1.37%
Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
8.1CVE-2020-23109debianlibheif+2
EPSS score
1.34%
Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attackers to cause a denial of service and disclose sensitive information, via a crafted HEIF file.
9.8CVE-2022-1253alpinelibde265+4
EPSS score
2.05%
Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.
7.8CVE-2022-47665debianlibde265+2
EPSS score
0.33%
Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int)
7.8CVE-2022-47664debianlibde265+1
EPSS score
0.31%
Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse
7.8CVE-2022-47655alpinelibde265+3
EPSS score
0.40%
Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback<unsigned short>
6.5CVE-2022-43245alpinelibde265+4
EPSS score
0.91%
Libde265 v1.0.8 was discovered to contain a segmentation violation via apply_sao_internal<unsigned short> in sao.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
6.5CVE-2022-43249alpinelibde265+4
EPSS score
0.91%
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_epel_hv_fallback<unsigned short> in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
6.5CVE-2022-43244alpinelibde265+4
EPSS score
0.91%
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_qpel_fallback<unsigned short> in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
6.5CVE-2022-43239alpinelibde265+4
EPSS score
0.91%
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_chroma<unsigned short> in motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
6.5CVE-2022-43241alpinelibde265+4
EPSS score
0.91%
Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_v_3_8_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
6.5CVE-2022-43250alpinelibde265+4
EPSS score
0.91%
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_qpel_0_0_fallback_16 in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
6.5CVE-2022-43252alpinelibde265+4
EPSS score
0.91%
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_epel_16_fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
6.5CVE-2022-43242alpinelibde265+4
EPSS score
0.92%
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_luma<unsigned char> in motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
6.5CVE-2022-43240alpinelibde265+4
EPSS score
0.91%
Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_hevc_qpel_h_2_v_1_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.
6.5CVE-2022-43238alpinelibde265+4
EPSS score
0.92%
Libde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_h_3_v_3_sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted video file.