Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:conan/libde265@1.0.8
purl pkg:conan/libde265@1.0.8
Next non-vulnerable version 1.0.12
Latest non-vulnerable version 1.0.15
Risk
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-5r6a-uvfy-b3d1
Aliases:
CVE-2021-36411
Out-of-bounds Read An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in function `derive_boundaryStrength` of `deblock.cc` has occurred. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service.
1.0.9
Affected by 2 other vulnerabilities.
VCID-aevu-s8rp-f7es
Aliases:
CVE-2021-35452
An Out-of-bounds Read vulnerability exists in libde265 due to a SEGV in `slice.cc`.
1.0.9
Affected by 2 other vulnerabilities.
VCID-cp59-hynh-bydw
Aliases:
CVE-2021-36409
Reachable Assertion There is an Assertion `scaling_list_pred_matrix_id_delta==1` failed at `sps.cc:925` in libde265 when decoding a file, which allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file or possibly have unspecified other impact.
1.0.9
Affected by 2 other vulnerabilities.
VCID-rqqd-ptxb-rqf8
Aliases:
CVE-2022-1253
Out-of-bounds Write Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.
1.0.9
Affected by 2 other vulnerabilities.
VCID-v5w4-wgke-8kd1
Aliases:
CVE-2021-36408
Use After Free There is a Heap-use-after-free in `intrapred.h` when decoding a file using `dec265`.
1.0.9
Affected by 2 other vulnerabilities.
VCID-ymdg-prmu-vybr
Aliases:
CVE-2021-36410
Out-of-bounds Write A stack-buffer-overflow exists in libde265 via `fallback-motion.cc` in function `put_epel_hv_fallback` when running program `dec265`.
1.0.9
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:41:59.471769+00:00 GitLab Importer Affected by VCID-rqqd-ptxb-rqf8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libde265/CVE-2022-1253.yml 38.6.0
2026-06-02T04:40:55.649319+00:00 GitLab Importer Affected by VCID-5r6a-uvfy-b3d1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libde265/CVE-2021-36411.yml 38.6.0
2026-06-02T04:40:55.521817+00:00 GitLab Importer Affected by VCID-cp59-hynh-bydw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libde265/CVE-2021-36409.yml 38.6.0
2026-06-02T04:40:55.289539+00:00 GitLab Importer Affected by VCID-ymdg-prmu-vybr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libde265/CVE-2021-36410.yml 38.6.0
2026-06-02T04:40:54.955835+00:00 GitLab Importer Affected by VCID-v5w4-wgke-8kd1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libde265/CVE-2021-36408.yml 38.6.0
2026-06-02T04:40:54.868339+00:00 GitLab Importer Affected by VCID-aevu-s8rp-f7es https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libde265/CVE-2021-35452.yml 38.6.0