Libde265 v1.0.11 exists to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc.
struktur libde265 1.0.11