A vulnerability marked as problematic has been reported in strukturag libde265 up to 1.0.x. This affects the function de265_image_get_buffer of the file libde265/image.cc. Performing a manipulation of the argument small results in integer overflow.

This vulnerability is known as CVE-2026-49346. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.