ffmpeg:ffmpeg_BSF_AV1_METADATA_fuzzer: Stack-use-after-return in cbs_av1_write_obu

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5931515701755904 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFAV1METADATAfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-use-after-return WRITE 1 Crash Addres...

OSV-2018-57 Heap-buffer-overflow in read_uncompressed_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11523 Crash type: Heap-buffer-overflow READ Crash state: readuncompressedheader av1decodeframeheadersandsetup aomdecodeframefromobus...

PT-2021-27620

Name of the Vulnerable Software and Affected Versions: aom affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the read uncompressed header function, av1 decode frame headers and setup, and aom decode frame fr...

PT-2021-27622

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead t...

PT-2021-27531

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. Technical details include a crash type of Stack-buffer-overflow READ 16, and the crash state...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in av1_selfguided_restoration_avx2

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6123203164504064 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in cdef_find_dir_avx2

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6570100937326592 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in av1_highbd_iwht4x4_16_add_c

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4834088829714432 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Understanding Emerging Video Formats

In my previous post, we discussed two new image formats: High-Efficiency Image File HEIF and AV1 Image File AVIF. In this article, we'll take a closer look at two emerging video formats built on the same foundations. Akamai Image & Video Manager IVM already supports the key video codecs H.264,...

Fedora 31 : seamonkey (2020-fd5918d946)

Additional fixes for AV1 codec and svg icon. ---- Update to 2.53.5 AV1 media codec now supported. Some fixes and improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora 32 : seamonkey (2020-396a3dfb1f)

Additional fixes for AV1 codec and svg icon. ---- Update to 2.53.5 AV1 media codec now supported. Some fixes and improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora 33 : seamonkey (2020-68ef4b6bc5)

Additional fixes for AV1 codec and svg icon. ---- Update to 2.53.5 AV1 media codec now supported. Some fixes and improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

CVE-2020-17105

AV1 Video Extension Remote Code Execution Vulnerability...

Remote code execution

AV1 Video Extension Remote Code Execution Vulnerability...

CVE-2020-17105 AV1 Video Extension Remote Code Execution Vulnerability

...

CVE-2020-17105

CVE-2020-17105 is an AV1 Video Extension Remote Code Execution vulnerability affecting Windows with the AV1 Video Extension component. Connected sources confirm a remote, network-exploitable flaw (no user interaction) that could allow arbitrary code execution and high/critical CVSS assessments ac...

CVE-2020-17105 AV1 Video Extension Remote Code Execution Vulnerability

...

CVE-2020-17105: Undefined Security Weakness

AV1 Video Extension Remote Code Execution Vulnerability...

AV1 Video Extension Remote Code Execution Vulnerability

...

openSUSE Security Update : libmediainfo / mediainfo (openSUSE-2020-1390)

This update for libmediainfo, mediainfo fixes the following issues : libmediainfo was updated to version 20.08 : Added : - MPEG-H 3D Audio full featured support group presets, switch groups, groups, signal groups - MP4/MOV: support of more metadata locations - JSON and XML outputs: authorize...