25 matches found
gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
UBUNTU-CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
vlc:vlc-demux-dec-libfuzzer-avi: Crash in dav1d_put_8tap_scaled_16bpc_avx2.vloop
Detailed Report: https://oss-fuzz.com/testcase?key=6551838609702912 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-avi Job Type: aflasanvlc Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x78d0d8960000 Crash State: dav1dput8tapscaled16bpcavx2.vloop...
SUSE CVE-2017-5841
The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving ncdt tags...
SUSE CVE-2017-5845
The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...
SUSE CVE-2022-1921
Integer overflow in avidemux element in gstavidemuxinvert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execution through heap overwrite...
Gstreamer Code Execution
The vulnerability of the gstavidemuxinvert function in the Gstreamer multimedia framework is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
DEBIAN-CVE-2022-38865
Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demuxavireadpacket of libmpdemux/demuxavi.c. This affects mplyer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1...
UBUNTU-CVE-2022-38865
Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demuxavireadpacket of libmpdemux/demuxavi.c. This affects mplyer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1...
MPlayer numerical error vulnerability
MPlayer is an open source multimedia player from the MPlayer team. A security vulnerability exists in MPlayer SVN-r38374-13.0.1 version, mencoder SVN-r38374-13.0.1 version, which originates from an easy-to-zero out via the demuxopenavi function in libmpdemux/demuxavi.c. The vulnerability is cause...
PT-2022-5192 · Gstreamer +8 · Gstreamer +8
Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is caused by an integer overflow in the gst avi demux invert function of the avidemux element in the Gstreamer multimedia framework. This overflow allows a heap overwrite while...
Gstreamer multimedia framework gst-plugins-good Plugin DoS
The vulnerability of the gstavidemuxparsencdt function gst/avi/gstavidemux.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to...
Gstreamer multimedia framework gst-plugins-good Plugin DoS
The vulnerability of the gstavidemuxparsencdt function gst/avi/gstavidemux.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause...
gstreamer-plugins-good: Heap out-of-bounds read in gst_avi_demux_parse_ncdt
The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving ncdt tags...
gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt
The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...
GStreamer gst-plugins-good denial of service vulnerability (CNVD-2017-01451)
GStreamer is a set of frameworks for handling streaming media. A denial-of-service vulnerability in the gstavidemuxparsencdt function in gst/avi/gstavidemux.c in GStreamer gst-plugins-good allows remote attackers to cause a denial of service out-of-bounds heap read...
GStreamer gst_avi_demux_parse_ncdt function denial of service vulnerability
GStreamer is an open source multimedia framework. GStreamer has a security vulnerability in the gst-plugins-good/gst/avi/gstavidemux.c/gstavidemuxparsencdt function, which causes a denial of service for remote attackers...
ALPINE-CVE-2017-5845
The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...
DEBIAN-CVE-2017-5841
The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving ncdt tags...
DEBIAN-CVE-2017-5845
The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...