Libde265
Vendor:
First CVE: Sep 16, 2021 · Active for 4 years
60
Total CVEs
More Total CVEs than 98% of tracked products
12.0
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Libde265 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 16, 2021
4 years ago
Most Recent CVE
Jun 19, 2026
36 days ago
CVE Severity & Scoring
Libde26560 CVEs
75%
23%
All CVEs352,708 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local16 (26.7%)
Network44 (73.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low60 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (5.0%)
Unknown0 (0.0%)
Required57 (95.0%)
Privileges Required
Low1 (1.7%)
High0 (0.0%)
None59 (98.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (60 CVEs).
60 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-49346HIGH libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit depth causes a signed | Jun 19, 2026 | 7.1 | 31 | NO | NO |
CVE-2026-49295HIGH libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in `decoder_context::p | Jun 19, 2026 | 7.1 | 31 | NO | NO |
CVE-2020-21598HIGH libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file. | Sep 16, 2021 | 8.8 | 28 | NO | NO |
CVE-2023-27103HIGH Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc. | Mar 15, 2023 | 8.8 | 26 | NO | NO |
CVE-2026-33164HIGH libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in pic_parameter_set::set_de | Mar 20, 2026 | 7.5 | 25 | NO | NO |
CVE-2022-47665HIGH Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int) | Mar 3, 2023 | 7.8 | 25 | NO | NO |
CVE-2022-47664HIGH Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse | Mar 3, 2023 | 7.8 | 25 | NO | NO |
CVE-2022-47655HIGH Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback<unsigned short> | Jan 5, 2023 | 7.8 | 25 | NO | NO |
CVE-2021-36409HIGH There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attackers to cause a Denial of Service (DoS) b | Jan 10, 2022 | 7.8 | 25 | NO | NO |
CVE-2023-25221HIGH Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function in motion.cc. | Mar 1, 2023 | 7.8 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (60 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (60 CVEs).
Media Mentions
Signals from CVEs in this product scope (60 CVEs).
Top CNAs Publishing CVEs For Libde265
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.0.9 | 3 | 7.8 | 0.3% | 0 | 0 |
| 1.0.8 | 21 | 6.4 | 0.9% | 0 | 0 |
| 1.0.4 | 13 | 6.7 | 1.3% | 0 | 0 |
| 1.0.15 | 2 | 6.5 | 0.4% | 0 | 0 |
| 1.0.14 | 3 | 8.8 | 0.8% | 0 | 0 |
| 1.0.12 | 2 | 7.3 | 0.9% | 0 | 0 |
| 1.0.11 | 2 | 7.7 | 0.8% | 0 | 0 |
| 1.0.10 | 8 | 5.9 | 0.4% | 0 | 0 |