Multiple Vulnerabilities in libde265 Affect Ubuntu 22.04 LTS

Several vulnerabilities were discovered in libde265, the open-source H.265 video codec implementation, affecting Ubuntu 22.04 LTS. The issues include improper memory management, heap buffer overflows, and segmentation faults, which could lead to denial of service attacks. Specific CVEs include CVE-2023-51792, CVE-2024-38949, CVE-2024-38950, CVE-2025-61147, CVE-2026-33164, and CVE-2026-33165. These vulnerabilities allow attackers to exploit malformed media files and crafted HEVC bitstreams. The vulnerabilities were published between April 2024 and March 2026. Users are advised to update their systems to mitigate these risks. The current status is that patches are available for affected versions. The issues highlight the importance of maintaining software updates to prevent potential exploitation.

Key Points: • libde265 vulnerabilities could lead to denial of service on Ubuntu 22.04 LTS. • Key CVEs include CVE-2023-51792 and CVE-2026-33165, published between 2024 and 2026. • Patches are available, and users are urged to update their systems promptly.