Multiple Vulnerabilities in libde265 Affect Ubuntu 22.04 LTS

Linuxsecurity

Multiple Vulnerabilities in libde265 Affect Ubuntu 22.04 LTS

First seen 21 Jul 2026, 09:36 UTC • •57.8

Article Content

1 / 4

Browse articles

ThreatCluster •July 22, 2026 at 06:39 UTC

•libde265 vulnerabilities could lead to denial of service on Ubuntu 22.04 LTS.
•Key CVEs include CVE-2023-51792 and CVE-2026-33165, published between 2024 and 2026.
•Patches are available, and users are urged to update their systems promptly.

Several vulnerabilities were discovered in libde265, the open-source H.265 video codec implementation, affecting Ubuntu 22.04 LTS. The issues include improper memory management, heap buffer overflows, and segmentation faults, which could lead to denial of service attacks. Specific CVEs include CVE-2023-51792, CVE-2024-38949, CVE-2024-38950, CVE-2025-61147, CVE-2026-33164, and CVE-2026-33165. These vulnerabilities allow attackers to exploit malformed media files and crafted HEVC bitstreams. The vulnerabilities were published between April 2024 and March 2026. Users are advised to update their systems to mitigate these risks. The current status is that patches are available for affected versions. The issues highlight the importance of maintaining software updates to prevent potential exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 52d ago How this analysis works

Timeline

2024-04-19

CVE-2023-51792 published

Memory management issues in libde265 could lead to denial of service on Ubuntu 22.04 LTS.

2024-06-26

CVE-2024-38949 and CVE-2024-38950 published

Heap buffer overflow vulnerabilities discovered in libde265, affecting Ubuntu 22.04 LTS.

2026-02-23

CVE-2025-61147 published

Segmentation fault vulnerability identified in libde265, impacting Ubuntu 22.04 LTS.

2026-03-20

CVE-2026-33164 and CVE-2026-33165 published

Out-of-bounds write and read vulnerabilities found in libde265, leading to potential denial of service.

2026-06-19

CVE-2026-49295 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-06-19

CVE-2026-49337 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-06-19

CVE-2026-49346 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

Recent

Patches released for libde265 vulnerabilities

Users are urged to update their systems to the latest versions to mitigate the risks associated with these vulnerabilities.

More articles in this cluster (3)

Following this threat?

Track Ubuntu and CVE-2023-51792 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure On September 10, 2026, GitLab released patches for critical vulnerabilities CVE-2026-85706 and CVE-2026-87719. CVE-2026-85706, a path traversal flaw, allows unauthenticated users to read arbitrary files from GitLab servers, while CVE-2026-87719 enables credential theft via insecure deserialization. Both…