Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

cleanstart libde265 can be crashed by attackers

published 4 days ago
Summary

The libde265 library used in cleanstart products contains a flaw that could let an attacker cause the program to stop working or behave unexpectedly. This could disrupt services that rely on video decoding. Update to the latest version of libde265 or apply the vendor's patch to prevent the issue.

What to do
  • Update cleanstart libde265 to version 1.0.11-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart libde265 < 1.0.11-r0
Fix: upgrade to 1.0.11-r0
Original advisory text
libde265 v1
Security vulnerability affects the libde265 package. libde265 v1.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.5 Medium
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2023-LS57405 · OSV
Track software like this
Free during beta