Samsung SMR 缓冲区错误漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. Samsung SMR suffers from a security vulnerability that stems from an OOB read vulnerability in libsaacextractor prior to the September 2021 release of SMR. An attacker can exploit...

PT-2021-16644

Name of the Vulnerable Software and Affected Versions: libsaacextractor.so library prior to SMR Sep-2021 Release 1 Description: The issue is related to an out-of-bounds OOB read vulnerability in the libsaacextractor.so library. This vulnerability allows attackers to execute a remote Denial of...

libfdk-aac:aacDecoder_DecodeFrame: Stack-use-after-scope in isResetNeeded

Detailed Report: https://oss-fuzz.com/testcase?key=4711256102666240 Project: libfdk-aac Fuzzing Engine: afl Fuzz Target: aacDecoderDecodeFrame Job Type: aflasanlibfdk-aac Platform Id: linux Crash Type: Stack-use-after-scope READ Crash Address: 0x7ffd08489cc0 Crash State: isResetNeeded...

Apple macOS AudioToolboxCore AAC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the AudioToolboxCore library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists with...

[SECURITY] Fedora 33 Update: mediainfo-21.03-1.fc33

MediaInfo CLI Command Line Interface. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio: codec, sample rate, channels, language, bitrate... Text: language of subtitle Chapters: number of...

PT-2021-5138

Name of the Vulnerable Software and Affected Versions MasterCard, Visa, American Express affected versions not specified Apple Pay affected versions not specified Samsung Pay affected versions not specified GPay affected versions not specified Description The issue is related to insufficient...

The vulnerability of the gst_aac_parse_sink_setcaps function (gst/audioparsers/gstaacparse.c) in the gst-plugins-good plugin for the Gstreamer multimedia framework allows a malicious actor to cause a service failure.

The vulnerability of the gstaacparsesinksetcaps function gst/audioparsers/gstaacparse.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow a remote attacker to caus...

ffmpeg:ffmpeg_dem_AAC_fuzzer: Heap-buffer-overflow in read_apic

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5096222622875648 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

PT-2021-04: AAC/ARQC cryptogram confusion

When an AAC cryptogram is requested, it can be substituted and presented to the tokeniser as an ARQC cryptogram. Moreover, when mobile phone declines the transaction due to risk management, some mobile wallets provide the AAC cryptogram and ATC, which can be used to authorise transactions. That...

libfdk-aac:aacDecoder_DecodeFrame: Global-buffer-overflow in Hcr_State_BODY_SIGN_ESC__BODY

Detailed Report: https://oss-fuzz.com/testcase?key=5674115860135936 Project: libfdk-aac Fuzzing Engine: afl Fuzz Target: aacDecoderDecodeFrame Job Type: aflasanlibfdk-aac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000866068 Crash State: HcrStateBODYSIGNESCBOD...

Apple macOS AudioCodecs AAC Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodecs module...

CVE-2020-0411

In AACExtractor of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Andro...

ASB-A-142641801

In AACExtractor of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

openSUSE Security Update : libmediainfo / mediainfo (openSUSE-2020-1390)

This update for libmediainfo, mediainfo fixes the following issues : libmediainfo was updated to version 20.08 : Added : - MPEG-H 3D Audio full featured support group presets, switch groups, groups, signal groups - MP4/MOV: support of more metadata locations - JSON and XML outputs: authorize...

Google Android Buffer Overflow Vulnerability (CNVD-2020-54309)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Android-11 version of AAC parser, which stems from a lack of bounds checking and can be exploited by an attacker to cause remote information disclosure...

CVE-2020-0355

In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141883493...

CVE-2020-0279

In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-131430997...

CVE-2020-0279

In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-131430997...

Out-of-bounds

In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-131430997...

CVE-2020-0279

In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-131430997...