vlc:vlc-demux-dec-libfuzzer-aac: Global-buffer-overflow in DecodeBlock

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6155966759632896 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-aac Job Type: aflasanvlc Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x5b19c24c2c2...

vlc:vlc-demux-dec-libfuzzer-aac: Stack-buffer-overflow in quant_to_spec

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5763964557656064 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-aac Job Type: aflasanvlc Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash Address: 0x79ecbf5d5ad0...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_DEC_fuzzer: Use-of-uninitialized-value in ff_aac_ec_data_dec

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6460684568428544 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_DEC_fuzzer: Global-buffer-overflow in dequant_scalefactors

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4540415134203904 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACDECfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

Linux Distros Unpatched Vulnerability : CVE-2016-2428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libAACdec/src/aacdecdrc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limi...

CVE-2020-0103

In a2dpaacdecodercleanup of a2dpaacdecoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer: Use-of-uninitialized-value in clip_output_fixed

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5001538727116800 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACFIXEDfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer: Heap-use-after-free in aac_decode_frame_int

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6007809271988224 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAACFIXEDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer: Heap-use-after-free in aac_decode_frame_int

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4948335235497984 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACFIXEDfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash...

FAAD2: Multiple Vulnerabilities

Background FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder. Description Multiple vulnerabilities have been discovered in FAAD2. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

libxaac:xaac_dec_fuzzer: Index-out-of-bounds in ixheaacd_smooth_m1m2

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=5150477182173184 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacdecfuzzer Job Type: libfuzzerubsanlibxaac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

libxaac:xaac_dec_fuzzer: Index-out-of-bounds in ixheaacd_parse_extension_frame

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=5778870881878016 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacdecfuzzer Job Type: libfuzzerubsanlibxaac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

Faad2 Buffer Error Vulnerability

Faad2 is a freeware Advanced Audio Aac decoder. It is used for Sbr decoding. A security vulnerability exists in Faad2 version v.2.10.1, which stems from the presence of a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code and cause a denial of service...

faad2:fuzz_decode: Stack-buffer-overflow in pns_decode

Project: https://github.com/knik0/faad2.git Detailed Report: https://oss-fuzz.com/testcase?key=6656408111415296 Project: faad2 Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecode Job Type: libfuzzerasanfaad2 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7ffeaccd4a80...

SUSE CVE-2016-9561

The checonfigure function in libavcodec/aacdectemplate.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service allocation of huge memory, and being killed by the OS via a crafted MOV file...

FAAD2 Heap Buffer Overflow Vulnerability (CNVD-2021-89952)

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. sbrqmfsynthesis64 function in sbrqmf.c in FAAD2 2.10.0 and earlier versions is vulnerable to a heap buffer overflow vulnerability. An attacker could exploit this vulnerability...

libfdk-aac:aacDecoder_DecodeFrame: Global-buffer-overflow in Hcr_State_BODY_SIGN_ESC__BODY

Detailed Report: https://oss-fuzz.com/testcase?key=5674115860135936 Project: libfdk-aac Fuzzing Engine: afl Fuzz Target: aacDecoderDecodeFrame Job Type: aflasanlibfdk-aac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000866068 Crash State: HcrStateBODYSIGNESCBOD...

CVE-2020-0103

In a2dpaacdecodercleanup of a2dpaacdecoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android...

PT-2020-11467

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-10 Description The issue is related to a possible invalid free due to memory corruption in the a2dp aac decoder cleanup function of a2dp aac decoder.cc. This could lead to remote code execution with n...

Android CAacDecoder_Init Code Execution

The vulnerability of the CAacDecoderInit function aacdecoder.cpp in the Android operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...