CVE-2026-33164 — NULL Pointer Dereference in libde265
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in pic_parameter_set::set…
Published: 2026-03-20 · CVSS: 8.7 · CVSS 4.0
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in pic_parameter_set::set_derived_values(). This issue has been patched in version 1.0.17.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7