CVE-2023-43887

    Dashboard / Vulnerabilities / CVE-2023-43887

    CVE-2023-43887

    Published: 22 Nov 2023Last Modified: 12 Aug 2026

    Summary:

    Details: Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the num_tile_columns and num_tile_row parameters in the function pic_parameter_set::dump.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43887.json, https://nvd.nist.gov/vuln/detail/CVE-2023-43887, https://github.com/strukturag/libde265/issues/418, https://github.com/strukturag/libde265/commit/63b596c915977f038eafd7647d1db25488a8c133, https://lists.debian.org/debian-lts-announce/2023/11/msg00032.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- a267c84707ab264928fa9b86de2ee749c48c318c
    Fixed -63b596c915977f038eafd7647d1db25488a8c133

    Affected versions

    1.0.12

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-43887 | CVE-DB