Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derivecollocatedmotion_vectors at motion.cc.