NULL Pointer Dereference in libde265

libde265: SAO sequential filter heap buffer overflow via signed integer overflow

libde265: Pixel accessor signed integer overflow causes heap OOB read/write

libde265 has a heap buffer overflow in de265_image_get_buffer via SPS dimension integer overflow

libde265 has an out-of-bounds write in process_reference_picture_set via predicted short-term RPS

libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.18

libde265 has a heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry

heap out-of-bounds write in libde265 1.0.16

libde265 has an unbounded memory leak via orphaned slice headers in `read_slice_NAL`