USN-8909-1: libde265 vulnerability
Ubuntu warns libde265 can crash on crafted H.265 bitstreams via a NULL pointer dereference.
Stories per day · 30 days
2 RSS
7 stories, newest first · one card per story
Stories tagged #libde265
Re: Vulnerabilities in libheif and libde265
libheif 1.23.5 ships security fixes as the underfunded libheif and libde265 project cites 61 advisories.
HEIF Heist Image Flaws Let Attackers Gain RCE Across Meta, Slack and GitHub Enterprise
Hacktron's "HEIF Heist" research shows memory-unsafe HEIF/AVIF parsers enable RCE and data leaks in Slack, Meta, GitHub Enterprise, and OpenAI.
4
HEIF Heist
Hacktron's HEIF Heist research reveals RCE and heap-leak vulnerabilities in libheif/libde265 HEIF/AVIF decoders, affecting Meta, OpenAI, GitHub Enterprise, Discourse, and Next.js.
Re: Vulnerabilities in libheif and libde265
Hanno Böck flags a security-relevant libheif fix (GHSA-v8qw-hwjv-44hw) rejecting oversized in-band coded image sizes, absent from release 1.23.4.
Vulnerabilities in libheif and libde265
Multiple new security advisories affect the libheif and libde265 codecs; users should verify versions against the published fixes.
Researchers use AI to find widespread software decoder flaw
Hacktron researchers, aided by Claude and GPT-5.6 Sol, disclosed HEIF Heist, memory-corruption flaws in libheif/libde265 enabling RCE against major platforms.
6