Design/Logic Flaw

Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...

CVE-2022-29017

Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...

UBUNTU-CVE-2022-29017

Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...

Bento4 安全漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0.0 contains a denial of service vulnerability that stems from a segmentation error in the /x8664/multiarch/strlen-avx2.S component, which could be exploited by an attacker to cause a denial of service...

OSV-2022-371 Segv on unknown address in jxl::N_AVX2::WriteToU8Stage::ProcessRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46963 Crash type: Segv on unknown address Crash state: jxl::NAVX2::WriteToU8Stage::ProcessRow jxl::LowMemoryRenderPipeline::RenderRect jxl::LowMemoryRenderPipeline::ProcessBuffers...

OSV-2022-305 Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46304 Crash type: Heap-buffer-overflow READ Crash state: jxl::NAVX2::BlendingStage::ProcessPaddingRow jxl::LowMemoryRenderPipeline::RenderPadding jxl::LowMemoryRenderPipeline::ProcessBuffers...

Mageia: Security Advisory (MGASA-2017-0453)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Incorrect hash in sha2

The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...

DEBIAN-CVE-2021-45831

A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via strlenavx2, which causes a Denial of Service...

PT-2022-12423 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Null Pointer Dereference issue exists in MP4Box via strlen avx2, causing a Denial of Service. Recommendations: For GPAC version 1.0.1, consider disabling the strlen avx2 function as a temporary workaround unt...

CVE-2021-45696

An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...

Design/Logic Flaw

An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...

CVE-2021-45696

An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...

CVE-2021-45696

An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...

CVE-2021-45696

CVE-2021-45696 pertains to the Rust sha2 crate, specifically version 0.9.7 before 0.9.8. The issue arises when the AVX2-accelerated backend is automatically enabled on x86/x86_64 targets, causing hashes of long messages to be incorrect. Public reports in OSV and CVE records confirm the root cause...

PT-2021-11924 · Aom · Aom

Name of the Vulnerable Software and Affected Versions: AOM version 2.0.1 Description: The issue is related to a segmentation violation in the component aom dsp/x86/obmc sad avx2.c. Recommendations: For AOM version 2.0.1, consider restricting access to the vulnerable component aom dsp/x86/obmc sad...

Miscomputed results when using AVX2 backend

The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...

RUSTSEC-2021-0100 Miscomputed results when using AVX2 backend

The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...

OSV-2021-1011 Use-of-uninitialized-value in jxl::N_AVX2::AddNoise

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36158 Crash type: Use-of-uninitialized-value Crash state: jxl::NAVX2::AddNoise jxl::FinalizeImageRect jxl::ThreadPool::RunCallStatejxl::FinalizeFrameDecoding...

UVI-2021-1000610 netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 version

netfilter: nftsetpipapoavx2: Add irqfpuusable check, fallback to non-AVX2 version This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by...