Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in `decoder_context::process_reference_picture_set()` (`libde265/decctx.cc:1376`). The root cause is a missing aggregate bound check on predicted short-term reference picture set entries. Individual list sizes are validated, but the combined count after predicted RPS construction can exceed the 16-entry `PocStFoll` array, writing at index 16. Version 1.0.20 patches the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-19 | 2 | Disclosure2 |
| 2026-06-20 | 1 | General1 |
CVE-2026-49295 Out-of-Bounds Array Write in libde265 Prior to Version 1.0.20 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-49295
Post summary
The text merely lists CVE‑2026‑49295 with a brief note and a link, providing no additional context, PoC, or exploitation details.
🚨*CVE* CVE-2026-49295 libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in `deco… https://www.cve.org/CVERecord?id=CVE-2026-49295 ----- Traducción: CVE-2026-49295 lib… http://infoflow.cloud`
Post summary
CVE-2026-49295 in libde265 allows crafted H.265 bitstreams to trigger an out‑of‑bounds array write; no PoC, exploit code, or active exploitation is reported.
CVE-2026-49295 libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in `deco… https://www.cve.org/CVERecord?id=CVE-2026-49295
Post summary
The tweet announces a memory corruption vulnerability (out-of-bounds array write) in libde265 prior to version 1.0.20, with no evidence of exploitation or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | struktur | libde265 | - | - | - |