414 matches found
Null pointer dereference
There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file...
CVE-2018-18828
There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
Heap overflow
There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18826
There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18827
There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18826
There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18828
There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18827
There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18827
CVE-2018-18827 affects Libav 12.3: a heap-based buffer over-read in ff_vc1_pred_dc (vc1_block.c) can cause denial of service via a crafted AAC file. Affected component is Libav’s video decoding path; no explicit exploit details or vendor patch information are provided in the connected documents. ...
CVE-2018-18828
There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18826
There exists a heap-based buffer overflow in vc1decodepmbintfi in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
CVE-2018-18829
CVE-2018-18829 describes a NULL pointer dereference in Libav 12.3, specifically in ff_vc1_parse_frame_header_adv (vc1.c). The underlying issue can cause a denial-of-service when parsing a crafted AAC file. The vulnerability affects Libav’s vc1 decoder path as implemented in that version. There is...
CVE-2018-18827
There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...
Sidify Music Converter 1.2.9 DLL Hijacking
===================================================== Exploit Title : Sidify Music Converter 1.2.9 - DLL Hijacking Code Execution Date Discovered : 2018-19-07 Affected Products: Sidify Music Converter v1.2.9 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7 &...
Unspecified vulnerability in Google Android omx aac component
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. omx aa is one of the multimedia components. Qualcomm MDM9206 and others are Qualcomm's central processing units CPUs for different platforms. Qualcomm MDM9206 and others are...
The vulnerability of the aac library component of the Media Framework operating system in Android, which allows a hacker to trigger a service failure
The vulnerability of the aac library component of the Media Framework operating system in Android is related to insufficient state checking. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Design/Logic Flaw
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, S...
CVE-2017-13254
A other vulnerability in the Android media framework AACExtractor. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70239507...
Libav Denial of Service Vulnerability (CNVD-2018-07428)
Libav is an open source audio and video processing tools , providing for conversion , manipulation and streaming of various multimedia formats and protocols cross-platform tools and libraries . A denial of service vulnerability exists in the applydependentcoupling function in libavcodec/aacdec.c ...