By vendor

Struktur vulnerabilities

Known CVEs affecting Struktur products, prioritized by severity, with SEC.co remediation and detection guidance.

3 published vulnerabilities

• CVE-2026-49295HIGH 7.1

  libde265, an open-source H.265 video codec library, contains a flaw where a specially crafted video file can cause the decoder to write data beyond the boundaries of an internal array. This happens during the processing of reference picture sets—a critical step in decoding H.265 video. The vulnerability can lead to application crashes or memory corruption, affecting any system that uses libde265 to decode H.265 video streams. The issue was patched in version 1.0.20.

• CVE-2026-49346HIGH 7.1

  libde265 is a video codec library used to decode H.265 video streams. A flaw in versions before 1.1.0 occurs when processing specially crafted video files with specific dimension and bit-depth properties. The vulnerability allows an attacker to trigger a memory overflow that corrupts the heap, potentially crashing applications or enabling further compromise. An attacker would need to trick a user into opening a malicious video file, but no special privileges are required.

• CVE-2026-49271MEDIUM 6.5

  libheif is a widely-used library for decoding and encoding HEIF and AVIF image formats. Versions before 1.22.1 contain a flaw in how they validate offsets within uncompressed HEIF files. An attacker can craft a malicious HEIF file that bypasses safety checks due to integer wraparound, then tricks the library into reading data from memory locations outside the intended buffer. This causes the application to crash and may leak information. The issue requires user interaction—someone must open the malicious file—but affects any application embedding libheif.