Skip to content

Libbpg Project · weakness class

Memory Corruption

9 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based buffer overflow and…CVE-2018-12447Libbpg Project · 3.7% likely

    CWE-190

  2. An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow…CVE-2016-8710Libbpg · CVSS 7.5 · 3.4% likely

    CWE-787

  3. The restore_tqb_pixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, which allows remote attackers to execute arbitrary code or cause…CVE-2016-5637Libbpg Project · 2.9% likely

    CWE-119

  4. The build_msps function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspec…CVE-2017-14734Libbpg Project · 1.6% likely

    CWE-119

  5. The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (integer underflow and application crash) or possibly have unspecifi…CVE-2017-14796Libbpg Project · 1.5% likely

    CWE-191

  6. The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attacke…CVE-2017-14034Libbpg Project · 1.5% likely

    CWE-125

  7. A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allo…CVE-2017-13135Libbpg Project · 1.4% likely

    CWE-476

  8. The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecif…CVE-2017-14795Libbpg Project · 1.3% likely

    CWE-125

  9. The image_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference.CVE-2017-13136Libbpg Project · 1.3% likely

    CWE-190

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.