PT-2023-2713 · Unknown · Av1 Video Extension

Name of the Vulnerable Software and Affected Versions: AV1 Video Extension affected versions not specified Description: The issue is related to insufficient input validation in the AV1 Video Extension codec. Exploitation of this issue may allow an attacker to execute arbitrary code using a...

KLA49154 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote cod...

Microsoft Windows AV1 Video Extensions RCE (May 2023)

The Windows 'AV1 Video Extension' app installed on the remote host is affected by remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 80900 C Tenable Network Security, Inc. The descriptive text and...

Fedora: Security Advisory for libheif (FEDORA-2023-fd63c401df)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for libheif (FEDORA-2023-440c8694e5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for libheif (FEDORA-2023-e679ea4fa2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: libheif-1.15.2-1.fc38

libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF AV1 Image File Format file format decoder and encoder...

DEBIAN-CVE-2023-1449

A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gfav1resetstate of the file mediatools/avparsers.c. The manipulation leads to double free. It is possible to launch the attack on the local host. The explo...

UBUNTU-CVE-2023-1449

A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gfav1resetstate of the file mediatools/avparsers.c. The manipulation leads to double free. It is possible to launch the attack on the local host. The explo...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A resource management error vulnerability exists in GPAC version 2.3-DEV-rev35-gbbca86917-master, which stems from a security issue in the function gfav1resetstate in the file mediatools/avparsers.c, resulting in a double release...

SUSE CVE-2020-36130

AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1dxiface.c...

Getting the correct HTML codecs parameter for an AV1 video

This post is mostly for my own reference, but I couldn't find a good guide elsewhere, so here we go! I wanted to embed a screencast in a web page, and I wanted it to be as efficient as possible. To achieve this, I created two version of the video, and embedded it like this: The MP4 version uses t...

Getting the correct HTML codecs parameter for an AV1 video

This post is mostly for my own reference, but I couldn't find a good guide elsewhere, so here we go! I wanted to embed a screencast in a web page, and I wanted it to be as efficient as possible. To achieve this, I created two version of the video, and embedded it like this: The MP4 version uses t...

CVE-2022-38019

AV1 Video Extension Remote Code Execution Vulnerability...

CVE-2022-38019

AV1 Video Extension Remote Code Execution Vulnerability...

Remote code execution

AV1 Video Extension Remote Code Execution Vulnerability...

CVE-2022-38019

CVE-2022-38019 affects the Windows AV1 Video Extension. The vulnerability stems from insufficient input validation in the AV1 codec, enabling arbitrary code execution (RCE) with likely local access and user interaction requirements. Public exploits exist and malware/public tooling have targeted t...

CVE-2022-38019 AV1 Video Extension Remote Code Execution Vulnerability

...

AV1 Video Extension Remote Code Execution Vulnerability

...

PT-2022-5839 · Unknown · Av1 Video Extension

Name of the Vulnerable Software and Affected Versions: AV1 Video Extension affected versions not specified Description: The issue is related to insufficient input validation in the AV1 Video Extension codec. Exploitation of this issue may allow an attacker to execute arbitrary code using a...