PYSEC-2021-892

libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in avifDecoderFindMetadata

Detailed Report: https://oss-fuzz.com/testcase?key=6321753147179008 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: avifDecoderFindMetadata...

Fedora: Security Advisory for go-avif (FEDORA-2021-1c3f7963a5)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: go-avif-0.1.0-8.fc34

Go-avif implements AVIF AV1 Still Image File Format encoder for Go using libaom, the high quality AV1 codec...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in avifDecoderFindMetadata

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5201960513961984 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in av1_selfguided_restoration_avx2

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6123203164504064 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in aom_lpf_vertical_6_sse2

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4812506765852672 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in cdef_find_dir_avx2

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6570100937326592 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in QColorSpace::QColorSpace

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5709815011737600 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in av1_predict_intra_block

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5198064491036672 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Understanding Emerging Video Formats

In my previous post, we discussed two new image formats: High-Efficiency Image File HEIF and AV1 Image File AVIF. In this article, we'll take a closer look at two emerging video formats built on the same foundations. Akamai Image & Video Manager IVM already supports the key video codecs H.264,...

Understanding New Image Formats

Akamai Image & Video Manager IVM already supports key modern image types, such as WebP, JPEG 2000, and JPEG XR, but the imaging industry is always evolving and raising the bar on the balance of compression and quality. In addition, creative and development teams are regularly asking about new...

PT-2020-21997

Name of the Vulnerable Software and Affected Versions avif affected versions not specified Description A crash occurs due to an unknown read issue. The crash involves the avifRWDataSet, avifParseItemDataBox, and avifParseMetaBox functions. Recommendations At the moment, there is no information...

PT-2020-21990

Name of the Vulnerable Software and Affected Versions avif affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the avifROStreamRead function. Specifically, the crash happens when calling avifROStreamReadU32 and avifROStreamReadBoxHeader...

AVIF has landed

Back in ancient July I released a video that dug into how lossy and lossless image compression works and how to apply that knowledge to compress a set of different images for the web. Well, that's already out of date because AVIF has arrived. Brilliant. AVIF is a new image format derived from the...

Microsoft Windows av1decodermft_store AVIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PT-2020-21913

Name of the Vulnerable Software and Affected Versions avif affected versions not specified Description A crash issue was identified, classified as an UNKNOWN WRITE. The crash occurred in the functions avifDecoderDataFillImageGrid and avifDecoderNextImage, as observed in the avif decode fuzzer.cc...