CVE-2021-31262

The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

OSV-2018-57 Heap-buffer-overflow in read_uncompressed_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11523 Crash type: Heap-buffer-overflow READ Crash state: readuncompressedheader av1decodeframeheadersandsetup aomdecodeframefromobus...

Understanding Emerging Video Formats

In my previous post, we discussed two new image formats: High-Efficiency Image File HEIF and AV1 Image File AVIF. In this article, we'll take a closer look at two emerging video formats built on the same foundations. Akamai Image & Video Manager IVM already supports the key video codecs H.264,...

Fedora 31 : seamonkey (2020-fd5918d946)

Additional fixes for AV1 codec and svg icon. ---- Update to 2.53.5 AV1 media codec now supported. Some fixes and improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora 32 : seamonkey (2020-396a3dfb1f)

Additional fixes for AV1 codec and svg icon. ---- Update to 2.53.5 AV1 media codec now supported. Some fixes and improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora 33 : seamonkey (2020-68ef4b6bc5)

Additional fixes for AV1 codec and svg icon. ---- Update to 2.53.5 AV1 media codec now supported. Some fixes and improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

CVE-2020-17105

AV1 Video Extension Remote Code Execution Vulnerability...

Remote code execution

AV1 Video Extension Remote Code Execution Vulnerability...

CVE-2020-17105 AV1 Video Extension Remote Code Execution Vulnerability

...

CVE-2020-17105 AV1 Video Extension Remote Code Execution Vulnerability

...

CVE-2020-17105

CVE-2020-17105 is an AV1 Video Extension Remote Code Execution vulnerability affecting Windows with the AV1 Video Extension component. Connected sources confirm a remote, network-exploitable flaw (no user interaction) that could allow arbitrary code execution and high/critical CVSS assessments ac...

AV1 Video Extension Remote Code Execution Vulnerability

...

openSUSE Security Update : libmediainfo / mediainfo (openSUSE-2020-1390)

This update for libmediainfo, mediainfo fixes the following issues : libmediainfo was updated to version 20.08 : Added : - MPEG-H 3D Audio full featured support group presets, switch groups, groups, signal groups - MP4/MOV: support of more metadata locations - JSON and XML outputs: authorize...

Microsoft Windows Codecs Library AV1 RCE (August 2020)

The Windows 'AV1 Video Extension' or 'AV1 from Device Manufacturer' app installed on the remote host is affected by two code execution vulnerabilities. An unauthenticated, remote attacker can exploit either of these vulnerabilities via a image file to execute code and gain control of the system. ...

UBUNTU-CVE-2019-20160

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1parsetilegroup in mediatools/avparsers.c...

GPAC buffer overflow vulnerability (CNVD-2020-00232)

GPAC is an open source multimedia framework. A buffer error vulnerability exists in the 'av1parsetilegroup' function in the mediatools/avparsers.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from a networked system or product performing operations in memory...

ffmpeg:ffmpeg_BSF_AV1_FRAME_MERGE_fuzzer: Index-out-of-bounds in cbs_av1_read_film_grain_params

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5747424845103104 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFAV1FRAMEMERGEfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

Security update for vlc (important)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2019:2015-1 Rating: important References: 1093732 1094893 1118586 1133290 1138354 1138933 1141522 1142161 1143547 1143549 Cross-References: CVE-2018-19857 CVE-2019-12874 CVE-2019-13602 CVE-2019-13962 CVE-2019-5439...

OPENSUSE-SU-2019:1909-1 Security update for vlc

This update for vlc to version 3.0.7.1 fixes the following issues: Security issues fixed: - CVE-2019-5439: Fixed a buffer overflow bsc1138354. - CVE-2019-5459: Fixed an integer underflow bsc1143549. - CVE-2019-5460: Fixed a double free bsc1143547. - CVE-2019-12874: Fixed a double free in...

Security update for vlc (important)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2019:1909-1 Rating: important References: 1093732 1094893 1118586 1133290 1138354 1138933 1141522 1142161 1143547 1143549 Cross-References: CVE-2018-19857 CVE-2019-12874 CVE-2019-13602 CVE-2019-13962 CVE-2019-5439...