Lucene search
+L

101 matches found

BDU FSTEC
BDU FSTEC
added 2023/12/04 12:00 a.m.14 views

The vulnerability of the Libavif library for encoding and decoding .avif files allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information. This vulnerability is exploitable through attacks using Google Chrome and Microsoft Edge browsers.

The vulnerability of the Libavif library for encoding and decoding .avif files in Google Chrome and Microsoft Edge browsers is related to the use of memory after file processing for .avif formats. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, an...

10CVSS7.6AI score0.0093EPSS
SaveExploits0References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:00 a.m.14 views

The vulnerability of the Libavif library for encoding and decoding .avif files allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information. This vulnerability is exploitable through attacks using Google Chrome and Microsoft Edge browsers.

The vulnerability of the Libavif library for encoding and decoding .avif files in Google Chrome and Microsoft Edge browsers is related to the issue of operations going beyond the buffer boundaries in memory when processing .avif files. Exploiting this vulnerability can allow an attacker to...

10CVSS7.8AI score0.01296EPSS
SaveExploits0References15Affected Software4
Veracode
Veracode
added 2023/12/01 3:14 p.m.39 views

Use After Free

Google Chrome is vulnerable to Use After Free. The vulnerability exists in libavif, potentially enabling an attacker to exploit heap corruption through a maliciously crafted AVIF file...

8.8CVSS6.7AI score0.01296EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
added 2023/12/01 3:14 p.m.34 views

Use After Free

Google Chrome is vulnerable to Use After Free. The vulnerability exists in libavif, potentially enabling an attacker to exploit heap corruption through a maliciously crafted AVIF file...

8.8CVSS6.6AI score0.0093EPSS
SaveExploits0References8Affected Software1
SUSE CVE
SUSE CVE
added 2023/11/30 2:06 a.m.13 views

SUSE CVE-2023-6350

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

8.8CVSS7.1AI score0.01296EPSS
SaveExploits0References7
OSV
OSV
added 2023/11/29 12:15 p.m.25 views

CVE-2023-6350

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

8.8CVSS6.2AI score
SaveExploits0References7
OSV
OSV
added 2023/11/29 12:15 p.m.8 views

DEBIAN-CVE-2023-6351

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

8.8CVSS8.2AI score0.0093EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/29 12:15 p.m.13 views

DEBIAN-CVE-2023-6350

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

8.8CVSS8.2AI score0.01296EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/29 12:15 p.m.29 views

CVE-2023-6351

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

8.8CVSS0.0093EPSS
SaveExploits0References7
OSV
OSV
added 2023/11/29 12:15 p.m.30 views

CVE-2023-6351

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

8.8CVSS6.2AI score
SaveExploits0References7
Prion
Prion
added 2023/11/29 12:15 p.m.35 views

Design/Logic Flaw

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

6.8CVSS7.2AI score0.01296EPSS
SaveExploits0References7Affected Software3
UbuntuCve
UbuntuCve
added 2023/11/29 12:15 p.m.38 views

CVE-2023-6350

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

8.8CVSS7.2AI score0.01296EPSS
SaveExploits0References6
Prion
Prion
added 2023/11/29 12:15 p.m.39 views

Design/Logic Flaw

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

6.8CVSS7.2AI score0.0093EPSS
SaveExploits0References7Affected Software3
UbuntuCve
UbuntuCve
added 2023/11/29 12:15 p.m.34 views

CVE-2023-6351

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

8.8CVSS7.2AI score0.0093EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2023/11/29 12:02 p.m.32 views

CVE-2023-6351

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

9.3AI score0.0093EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2023/11/29 12:02 p.m.86 views

CVE-2023-6350

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

8.8CVSS9.4AI score0.01296EPSS
SaveExploits0
CVE
CVE
added 2023/11/29 12:02 p.m.221 views

CVE-2023-6351

CVE-2023-6351 describes a use-after-free in libavif used by Google Chrome before 119.0.6045.199, allowing a remote attacker to cause heap corruption via a crafted AVIF file. Affected product/component: Google Chrome/Chromium with libavif. Root cause: use-after-free in libavif leading to possible ...

8.8CVSS9AI score0.0093EPSS
SaveExploits0References7Affected Software1
CVE
CVE
added 2023/11/29 12:02 p.m.578 views

CVE-2023-6350

CVE-2023-6350 is a use-after-free in libavif used by Google Chrome/Chromium before version 119.0.6045.199, potentially enabling remote heap corruption via a crafted avif file. Affected software stacks include Chromium-based browsers (Chrome/Chromium) and related Electron builds, with multiple sec...

8.8CVSS9AI score0.01296EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2023/11/29 12:02 p.m.38 views

CVE-2023-6350

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

9.3AI score0.01296EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2023/11/29 12:02 p.m.74 views

CVE-2023-6351

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. Chromium security severity: High...

8.8CVSS9.4AI score0.0093EPSS
SaveExploits0
Rows per page
Query Builder