Fedora 28 : mkvtoolnix (2018-317ecbb54f)

Version 28.2.0 'The Awakening' 2018-10-25 Bug fixes - mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info tool & chapter editor: fixed a case of memory being accessed after it had been freed earlier. This can be triggered by specially crafted Matroska files and lead to arbitrary cod...

PT-2018-3989

Name of the Vulnerable Software and Affected Versions FFMPEG version 4.1 Description The issue is related to improper validation of array indices in the libavcodec/cbs av1.c component of the FFmpeg library. This can be exploited via a specially crafted AV1 file, potentially leading to a denial of...

#OTTuesday: Five Technologies Shaping the Future of OTT

The world of OTT is changing radically with new innovations, from player technologies to standards convergence, propelling the industry forward. As 2018 comes to a close, AkamaiTV sat down with DASH legend and Akamai's very own Will Law to get his pulse on the major trends and technologies that a...

libaom/av1_dec_fuzzer: Index-out-of-bounds in read_uncompressed_header

Detailed report: https://oss-fuzz.com/testcase?key=5682574110752768 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: readuncompressedheader...

Fedora 27 : mkvtoolnix (2018-8587111c5a)

Version 28.2.0 'The Awakening' 2018-10-25 Bug fixes - mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info tool & chapter editor: fixed a case of memory being accessed after it had been freed earlier. This can be triggered by specially crafted Matroska files and lead to arbitrary cod...

libaom/av1_dec_fuzzer_threaded: Index-out-of-bounds in av1_read_mode_info

Detailed report: https://oss-fuzz.com/testcase?key=5140384123453440 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzerthreaded Fuzz target binary: av1decfuzzerthreaded Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: av1readmodeinfo...

Unfixed XSS vulnerability at av1.av49.com

Security researcher PD, has submitted on 10/03/2008 a cross-site-scripting XSS vulnerability affecting av1.av49.com, which at the time of submission ranked 104938 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/04/2008. It is currently...

Unfixed XSS vulnerability at av1.av49.com

Security researcher PD, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting av1.av49.com, which at the time of submission ranked 85963 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently unfixe...

Unfixed XSS vulnerability at av1.av49.com

Security researcher PD, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting av1.av49.com, which at the time of submission ranked 85963 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently unfixe...