It was discovered that libde265 did not properly validate certain crafted H.265 bitstreams, leading to a NULL pointer dereference. An attacker could possibly use this issue to cause libde265 to crash, resulting in a denial of service. Update Instructions: Run `sudo pro fix USN-8909-1` to fix the vulnerability. The problem can be corrected by updating your system to the following package versions: libde265-0 - 1.0.15-1ubuntu0.2 libde265-examples - 1.0.15-1ubuntu0.2 No subscription required
Last supporting evidence check: 2026-10-24T18:55:03.191Z UTC
libde265-0 1.0.15-1ubuntu0.2-1.0.15-1ubuntu0.2
libde265-examples 1.0.15-1ubuntu0.2-1.0.15-1ubuntu0.2
libde265-0 1.0.8-1ubuntu0.3+esm3-1.0.8-1ubuntu0.3+esm3
libde265-examples 1.0.8-1ubuntu0.3+esm3-1.0.8-1ubuntu0.3+esm3
libde265-0 1.0.16-1ubuntu0.1~esm2-1.0.16-1ubuntu0.1~esm2
libde265-examples 1.0.16-1ubuntu0.1~esm2-1.0.16-1ubuntu0.1~esm2
libde265-0 1.0.4-1ubuntu0.4+esm3-1.0.4-1ubuntu0.4+esm3
libde265-examples 1.0.4-1ubuntu0.4+esm3-1.0.4-1ubuntu0.4+esm3