CVE-2026-33164
NULL Pointer Dereference in libde265
Summary
NULL Pointer Dereference in libde265
Original description
The description as published by the source.
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in pic_parameter_set::set_derived_values(). This issue has been patched in version 1.0.17.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2026-33164 libde265 Fixed in: 1.0.18-r0
- Debian DEBIAN-CVE-2026-33164 libde265 Fixed in: 1.0.11-0+deb11u4
- Ubuntu UBUNTU-CVE-2026-33164 libde265 Fixed in: 1.0.2-2ubuntu0.16.04.1~esm6
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com