CVE-2023-27103 Memory corruption in n/a

High 8.8 Published 15 Mar 2023 Updated 2 Aug 2024

A heap buffer overflow in libde265 allows attackers to execute arbitrary code or cause denial of service via crafted video files.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2023-27103?

CVE-2023-27103 is a high-severity memory corruption vulnerability in Struktur Libde265, published on 15 Mar 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc.

Weakness: CWE-787

Which versions are affected by CVE-2023-27103?

It affects 1 product.

Products include Struktur Libde265.

How do I fix CVE-2023-27103?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2023-27103 being exploited?

There is no known exploitation of CVE-2023-27103 in the wild and no public exploit code.

All Struktur Libde265 vulnerabilities

Sources

Also known as ALPINE-CVE-2023-27103, DEBIAN-CVE-2023-27103, GHSA-prq4-3c39-j9jq, UBUNTU-CVE-2023-27103.