CVE-2021-36409

There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file or possibly have unspecified other impact.

• CWE-617

• https://github.com/strukturag/libde265/issues/300Exploit, Issue Tracking
• https://lists.debian.org/debian-lts-announce/2022/12/msg00027.htmlIssue Tracking, Mailing List
• https://www.debian.org/security/2023/dsa-5346Issue Tracking
• https://github.com/strukturag/libde265/issues/300Exploit, Issue Tracking
• https://lists.debian.org/debian-lts-announce/2022/12/msg00027.htmlIssue Tracking, Mailing List
• https://www.debian.org/security/2023/dsa-5346Issue Tracking

Published

Jan 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3640A flaw use-after-free in function sco_sock_sendmsg() of the …7
• CVE-2021-36400In Moodle, insufficient capability checks made it possible t…5.3
• CVE-2021-36401In Moodle, ID numbers exported in HTML data formats required…4.8
• CVE-2021-36402In Moodle, Users' names required additional sanitizing in th…5.3
• CVE-2021-36403In Moodle, in some circumstances, email notifications of mes…5.3
• CVE-2021-36408An issue was discovered in libde265 v1.0.8.There is a Heap-u…5.5
• CVE-2021-3641Improper Link Resolution Before File Access ('Link Following…6.1
• CVE-2021-36410A stack-buffer-overflow exists in libde265 v1.0.8 via fallba…5.5
• CVE-2021-36411An issue has been found in libde265 v1.0.8 due to incorrect …5.5
• CVE-2021-36412A heap-based buffer overflow vulnerability exists in MP4Box …7.8
• CVE-2021-36414A heab-based buffer overflow vulnerability exists in MP4Box …7.8
• CVE-2021-36417A heap-based buffer overflow vulnerability exists in GPAC v1…7.8