CVE-2025-54957

CVE-2025-54957 affects Dolby UDC (Unified Decoder) versions 4.5–4.13 and is triggered while processing a DD+/EMDF payload in the decoder. The root cause is an integer overflow in evo_malloc computing total_size, leading to a too-small allocation, combined with a write loop that can exceed the all...

EUVD-2016-0835

Malware in sbrugna...

EUVD-2011-3926

Malware in sbrugna...

EUVD-2019-11898

Malware in sbrugna...

EUVD-2019-11897

Malware in sbrugna...

EUVD-2022-40758

Malicious code in bioql PyPI...

EUVD-2025-2204

Malicious code in bioql PyPI...

EUVD-2025-5088

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-14645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was discovered in AP4BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an...

Linux Distros Unpatched Vulnerability : CVE-2019-8378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.5.1-628. A heap-based buffer over-read exists in AP4BitStream::ReadBytes in Codecs/Ap4BitStream.cpp, a similar issue to...

Linux Distros Unpatched Vulnerability : CVE-2022-3664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4BitStream::WriteBytes of the file Ap4BitStream.cpp of the...

OSV-2025-510 Use-after-poison in llvm::BitstreamCursor::readRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=428525443 Crash type: Use-after-poison READ 1 Crash state: llvm::BitstreamCursor::readRecord BitcodeReader::parseModule llvm::BitcodeModule::getModuleImpl...

BitBypass: a New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage

The inherent risk of generating harmful and unsafe content by Large Language Models LLMs, has highlighted the need for their safety alignment. Various techniques like supervised fine-tuning, reinforcement learning from human feedback, and red-teaming were developed for ensuring the safety alignme...

ARIANNA: an Automatic Design Flow for Fabric Customization and EFPGA Redaction

In the modern global Integrated Circuit IC supply chain, protecting intellectual property IP is a complex challenge, and balancing IP loss risk and added cost for theft countermeasures is hard to achieve. Using embedded configurable logic allows designers to completely hide the functionality of...

CVE-2022-29339

In GPAC 2.1-DEV-rev87-g053aae8-master, function BSReadByte in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2...

CVE-2014-125022

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shortendecodeframe of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this...

SUSE CVE-2025-27091

OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence...

CVE-2025-27091

OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence...

DEBIAN-CVE-2025-27091

OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence...

UBUNTU-CVE-2025-27091

OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence...