64 matches found
Astra Linux – Vulnerability in aom
aomimage.c in libaom in AOMedia before 2021-04-07 releases memory that is not located in the heap...
Astra Linux – Vulnerability in aom
The file aomdsp/noisemodel.c in the libaom library within AOMedia, dated before March 24, 2021, contains a buffer overflow vulnerability...
gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tile_list_obu parser byte/bit confusion
A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad. The gstav1parserparsetilelistobu function passes a byte count to a bit-reader API that expects a bit count, causing parser desynchronization. A remote attacker could trick a user into opening a special...
EUVD-2026-38046
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...
CVE-2026-56210
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...
EUVD-2026-38045
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing LAP mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when glaginframes is set to 1 or higher. This results in a 232-byte...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, caused by an error in calculating the buffer size for AV1 block information. This vulnerability may lead to the...
UBUNTU-CVE-2026-30997
An out-of-bounds read in the readglobalparam function libavcodec/av1dec.c of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
EUVD-2023-43325
Malicious code in bioql PyPI...
USN-7397-1 aom vulnerability
Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...
libaom security breach
libaom is a software application. A reference codec for the AOMedia Video 1 format. A security vulnerability exists in libaom that stems from an integer overflow in the imgallochelper function of the libaom library...
AOMedia Buffer Error Vulnerability
AOMedia is a next-generation open source digital media technology for everyone from the AOMedia organization. AOMedia versions prior to v3.7.1 suffer from a buffer error vulnerability that stems from the fact that increasing the resolution of a video frame while performing multi-threaded encoding...
aom_dsp/noise_model.c AV1 Code Execution
The vulnerability of the aomdsp/noisemodel.c component in the library that implements the AV1 codec in the Debian GNU/Linux operating system is caused by buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
CVE-2023-39616
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...
DEBIAN-CVE-2023-39616
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...
CVE-2023-39616
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...
CVE-2023-39616
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...
Design/Logic Flaw
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...
