{"id":"CVE-2023-43887","details":"Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the num_tile_columns and num_tile_row parameters in the function pic_parameter_set::dump.","modified":"2026-08-12T14:51:11.561320Z","published":"2023-11-22T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43887.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43887.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43887"},{"type":"REPORT","url":"https://github.com/strukturag/libde265/issues/418"},{"type":"FIX","url":"https://github.com/strukturag/libde265/commit/63b596c915977f038eafd7647d1db25488a8c133"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00032.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/strukturag/libde265","events":[{"introduced":"a267c84707ab264928fa9b86de2ee749c48c318c"},{"fixed":"63b596c915977f038eafd7647d1db25488a8c133"}],"database_specific":{"cpe":"cpe:2.3:a:struktur:libde265:1.0.12:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.12"},{"last_affected":"1.0.12"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["1.0.12","v1.0.12"],"database_specific":{"vanir_signatures":[{"target":{"file":"libde265/decctx.cc","function":"decoder_context::read_pps_NAL"},"deprecated":false,"digest":{"function_hash":"115318745234840897845172318388566652946","length":468},"id":"CVE-2023-43887-33eaefc0","signature_type":"Function","signature_version":"v1","source":"https://github.com/strukturag/libde265/commit/63b596c915977f038eafd7647d1db25488a8c133"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/strukturag/libde265/commit/63b596c915977f038eafd7647d1db25488a8c133","target":{"file":"libde265/decctx.cc"},"deprecated":false,"digest":{"line_hashes":["145631099459763226381212929949972107850","329025106158059296245517650606473879127","224877373758412648504169160339250263469","33325110550459107806935975561007447492","67677560191946787987919874293443464310","150421879833117031061740108422218256599","313785268145090874383446176971876695378","53004177848232812490147634192017942808","240418118779755308749764802555398091281","194908936974693031164250873985602853148","122689502183537620170736254362945799620"],"threshold":0.9},"id":"CVE-2023-43887-af066c82"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43887.json","vanir_signatures_modified":"2026-08-12T14:51:11Z"}}],"schema_version":"1.9.0"}