CVE-2022-1253 - CVE House

Status published High CVE-2022-1253

Heap-based Buffer Overflow in strukturag/libde265

7.4 CVSS

Vulnerability Description

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1253

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from strukturag

View All →

CVE-2025-68431

libheif has Potential Heap Buffer Over-Read

Medium 6.5

Affected Vendor

strukturag

View all reports →

Affected Software

strukturag/libde265

Vulnerable Versions:

unspecified

Timeline

Official Publish: April 6th, 2022

Last Modified: August 2nd, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Weaknesses (CWE)

CWE-122

MITRE ATT&CK TTPs

T1203 Exploitation for Client Execution

Execution

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1055 Process Injection

Defense Evasion