VDB
CVE-2023-25221
CVE-2023-25221
PUBLISHED
CVSS 7.800000190734863 HIGH
Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function in motion.cc.
EPSS 0.33% · 25.0th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.33%
25.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| debian | debian_linux | 10.0, 10.0, 10.0 |
| ibm | spectrum_fusion_hci | 2.5.2 |
| struktur | libde265 | 1.0.10, 1.0.10, 1.0.10 |
| IBM | Spectrum Fusion HCI | 2.5.2 |
| n/a | n/a | n/a |
Timeline
- Mar 1, 2023 CVE Published
- Mar 2, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 10, 2023 CVE Updated
- Apr 11, 2023 EPSS Score
- May 21, 2023 EPSS Score
- Jun 29, 2023 EPSS Score
- Aug 8, 2023 EPSS Score
- Sep 17, 2023 EPSS Score
- Oct 27, 2023 EPSS Score
- Dec 6, 2023 EPSS Score
- Jan 15, 2024 EPSS Score
References
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24844 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24839 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24848 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24845 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24850 advisory
- https://lists.debian.org/debian-lts-announce/2025/09/msg00025.html advisory
- https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html advisory
- https://www.ibm.com/support/pages/node/7151040 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/266807 vdb
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24827 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24840 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24837 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24842 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24843 advisory
- https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-25221 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24836 advisory
- https://github.com/strukturag/libde265/issues/388 discussion
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24838 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24841 advisory