libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a global buffer overflow vulnerability in the decode_CABAC_bit function. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service.