534 matches found
CVE-2019-9247
In AAC Codec, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120426166...
PT-2019-19469
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing variable initialization in the AAC Codec. This could lead to remote information disclosure without requiring additional execution privileges. User interaction is necessa...
PT-2019-19502
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible resource exhaustion in the AAC Codec due to improper input validation. This could lead to a remote denial of service, and no additional execution privileges are needed...
CVE-2019-9283: Improper Input Validation
In AAC Codec, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112663564...
CVE-2019-9247: Missing Initialization of Resource
In AAC Codec, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120426166...
[SECURITY] [DSA 4522-1] faad2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4522-1 [email protected] https://www.debian.org/security/ Hugo Lefeuvre September 15, 2019 https://www.debian.org/security/faq -...
libfdk-aac:aacDecoder_DecodeFrame: Index-out-of-bounds in sbrGetChannelElement
Detailed Report: https://oss-fuzz.com/testcase?key=5745965901807616 Project: libfdk-aac Fuzzing Engine: libFuzzer Fuzz Target: aacDecoderDecodeFrame Job Type: libfuzzerubsanlibfdk-aac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: sbrGetChannelElement sbrDecoderPar...
Gesior-AAC SQL Injection Vulnerability (CNVD-2019-31346)
Gesior-AAC is an official tibia.com layout created based on cipsoft. A SQL injection vulnerability exists in the thankyou.php file in versions of Gesior-AAC prior to 2019-05-01. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. ...
Gesior-AAC SQL Injection Vulnerability (CNVD-2019-31347)
Gesior-AAC is an official tibia.com layout created based on cipsoft. A SQL injection vulnerability exists in the accountmanagement.php file in versions of Gesior-AAC prior to 2019-05-01. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...
Gesior-AAC SQL Injection Vulnerability
Gesior-AAC is an official tibia.com layout created based on cipsoft. A SQL injection vulnerability exists in the shop.php file in versions of Gesior-AAC prior to 2019-05-01. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An...
Debian DLA-1899-1 : faad2 security update
Multiple vulnerabilities have been discovered in faad2, the Freeware Advanced Audio Coder : CVE-2018-19502 Heap buffer overflow in the function excludedchannels libfaad/syntax.c. This vulnerability might allow remote attackers to cause denial of service via crafted MPEG AAC data. CVE-2018-20196...
[SECURITY] [DLA 1899-1] faad2 security update
Package : faad2 Version : 2.7-8+deb8u3 CVE ID : CVE-2018-19502 CVE-2018-20196 CVE-2018-20199 CVE-2018-20360 CVE-2019-6956 CVE-2019-15296 Debian Bug : 914641 Multiple vulnerabilities have been discovered in faad2, the Freeware Advanced Audio Coder: CVE-2018-19502 Heap buffer overflow in the functi...
CVE-2019-15574
Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php...
CVE-2019-15573
Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php...
CVE-2019-15572
Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php...
CVE-2019-15574
Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php...
CVE-2019-15572
Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php...
CVE-2019-15573
Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php...
