CVE-2024-38949

6.5 mediumEPSS 0.4%

Medium (6.5) in struktur libde265. EPSS 0.4% chance of exploitation in the next 30 days.

Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to display444as420 function at sdl.cc

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-122
Published: 2024-06-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

struktur:libde265

References

https://github.com/strukturag/libde265/issues/460
https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-38949
https://github.com/strukturag/libde265/issues/460
https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-38949

Check your stack JSON