Integer Overflow in libde265 Video Codec Implementation by Struktur AG

CVE-2026-49346

What is CVE-2026-49346?

libde265, an open-source implementation of the H.265 video codec, is susceptible to an integer overflow due to crafted H.265 bitstreams with large SPS dimensions and 16-bit bit depth. This vulnerability can cause the de265_image_get_buffer() function to produce a signed integer overflow, leading to a substantial misallocation of memory in the heap. Specifically, an erroneous allocation size can be wrapped to a small value (approximately 1 KB), while the actual image size calculation yields a requirement of nearly 4 GB. This discrepancy results in a potentially exploitable heap overflow condition. Users are urged to upgrade to version 1.1.0 or later to mitigate this issue.

References