CVE-2026-45382: Heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry
Origin: https://github.com/strukturag/libde265/commit/
c33b4f63ae9056b00f34a31874fed55cd0aa29c9
Bug: https://github.com/strukturag/libde265/security/advisories/GHSA-hwhx-x2mq-ccr9
From
c33b4f63ae9056b00f34a31874fed55cd0aa29c9 Mon Sep 17 00:00:00 2001
From: Dirk Farin <dirk.farin@gmail.com>
Date: Sun, 10 May 2026 19:57:18 +0200
Subject: [PATCH] fix CTB OOB access when pps.sps mismatches active sps
(GHSA-hwhx-x2mq-ccr9)
Gbp-Pq: Name CVE-2026-45382.patch