CVE-2020-21594

MEDIUM

libde265 1.0.4 - Heap Buffer Overflow in put_epel_hv_fallback

Title source: llm

libde265 v1.0.4 contains a heap buffer overflow in the put_epel_hv_fallback function, which can be exploited via a crafted a file.

Core 2

Core References

Third Party Advisory vendor-advisory

Exploit, Third Party Advisory

CVSS v3 6.5

EPSS 0.0114

EPSS Percentile 62.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-787

Status published

Products (1)

struktur/libde265 1.0.4

Published Sep 16, 2021

Tracked Since Feb 18, 2026