CVE-2026-49337

{
  "id": "CVE-2026-49337",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-19T21:17:01.720",
  "lastModified": "2026-10-25T23:10:00.167",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted sequence of H.265 NAL units causes `decoder_context::read_slice_NAL()` (`libde265/decctx.cc:481`) to attach slice headers to a finished picture object\nthat has no active image unit, resulting in attacker-controlled unbounded heap growth. The retained headers are never freed until the picture is released, which may not happen during continuous streaming. Version 1.0.20 patches the issue."
    },
    {
      "lang": "es",
      "value": "libde265 es una implementación de código abierto del códec de video h.265. Antes de la versión 1.0.20, una secuencia manipulada de unidades NAL de H.265 provoca que decoder_context::read_slice_NAL() (libde265/decctx.cc:481) adjunte encabezados de segmento a un objeto de imagen finalizado que no tiene una unidad de imagen activa, lo que resulta en un crecimiento de pila ilimitado controlado por el atacante. Los encabezados retenidos nunca se liberan hasta que se libera la imagen, lo cual puede no ocurrir durante la transmisión continua. La versión 1.0.20 corrige el problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "strukturag",
          "product": "libde265",
          "versions": [
            {
              "version": "< 1.0.20",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-22T13:59:34.760551Z",
          "id": "CVE-2026-49337",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/strukturag/libde265/commit/683cb9fa603e35840642f98765ab95cdb71cadf9",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/strukturag/libde265/security/advisories/GHSA-g5hj-rf9f-7vxm",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/strukturag/libde265/security/advisories/GHSA-g5hj-rf9f-7vxm",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}