← Vulnerability feed

Vulnerability record · CVE-2026-33165 · published 20 March 2026

CVE-2026-33165: Struktur libde265 out-of-bounds write vulnerability

Struktur · Libde265

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a crafted HEVC bitstream causes an out-of-bounds heap write confirmed by AddressSanitizer. The trigger is a stale ctb_info.log2unitSize after an SPS change where PicWidthInCtbsY and PicHeightInCtbsY stay constant but Log2CtbSizeY changes, causing set_SliceHeaderIndex to index past the allocated image metadata array and write 2 bytes past the end of a heap allocation. This issue has been patched in version 1.0.17.

5.0 CVSS 3.1 Medium EPSS 0.19% · top 92.4% CWE-787 · Out-of-bounds write
5.0CVSS 3.1 base score
0.19%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References, 1 tagged exploit
17 Jun 2026Last modified by NVD

Description

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a crafted HEVC bitstream causes an out-of-bounds heap write confirmed by AddressSanitizer. The trigger is a stale ctb_info.log2unitSize after an SPS change where PicWidthInCtbsY and PicHeightInCtbsY stay constant but Log2CtbSizeY changes, causing set_SliceHeaderIndex to index past the allocated image metadata array and write 2 bytes past the end of a heap allocation. This issue has been patched in version 1.0.17.

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/strukturag/libde265/commit/c7891e412106130b83f8e8ea8b7f907e9449b658 Patch
https://github.com/strukturag/libde265/releases/tag/v1.0.17 Release Notes
https://github.com/strukturag/libde265/security/advisories/GHSA-653q-9f73-8hvg ExploitPatchVendor Advisory

Track CVE-2026-33165 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-1253Struktur libde265 heap-based buffer overflow vulnerabilityHeap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c3…EPSS 2.1%8.8CVE-2023-49468Struktur libde265 out-of-bounds write vulnerabilityLibde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at slice.cc.EPSS 0.87%8.8CVE-2023-49465Struktur libde265 out-of-bounds write vulnerabilityLibde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function at motion.cc.EPSS 0.80%8.8CVE-2023-49467Struktur libde265 out-of-bounds write vulnerabilityLibde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates function at mo…EPSS 0.77%8.8CVE-2023-27103Struktur libde265 out-of-bounds write vulnerabilityLibde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc.EPSS 0.85%8.8CVE-2020-21598Struktur libde265 out-of-bounds write vulnerabilitylibde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file.EPSS 1.8%8.7CVE-2026-33164Struktur libde265 heap-based buffer overflow vulnerabilitylibde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fau…EPSS 0.52%8.1CVE-2023-43887Struktur libde265 classic buffer overflow vulnerabilityLibde265 v1.0.12 was discovered to contain multiple buffer overflows via the num_tile_columns and num_tile_row parameters in the function pic_paramet…EPSS 0.98%

Source: NIST National Vulnerability Database (record CVE-2026-33165), CISA KEV, FIRST EPSS (scores of 2026-10-03). This page is refreshed as NVD updates the record.