CVE-2025-27091

OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence...

CVE-2025-20889

Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jan-2025 Release 1, which stems from an out-of-bounds read issue contained in the...

CVE-2024-38364

DSpace is an open source software is a turnkey repository application used by more than 2,000 organizations and institutions worldwide to provide durable access to digital resources. In DSpace 7.0 through 7.6.1, when an HTML, XML or JavaScript Bitstream is downloaded, the user's browser may execu...

DSpace Security Vulnerabilities

DSpace is an open source turnkey repository application for the DuraSpace community. A security vulnerability exists in DSpace versions 7.0 through 7.6.1, which stems from the possibility that a user's browser may execute any embedded JavaScript when an HTML, XML, or JavaScript Bitstream is...

CVE-2024-38364 DSpace Cross Site Scripting (XSS) via a deposited HTML/XML document

DSpace is an open source software is a turnkey repository application used by more than 2,000 organizations and institutions worldwide to provide durable access to digital resources. In DSpace 7.0 through 7.6.1, when an HTML, XML or JavaScript Bitstream is downloaded, the user's browser may execu...

CVE-2024-38364 DSpace Cross Site Scripting (XSS) via a deposited HTML/XML document

DSpace is an open source software is a turnkey repository application used by more than 2,000 organizations and institutions worldwide to provide durable access to digital resources. In DSpace 7.0 through 7.6.1, when an HTML, XML or JavaScript Bitstream is downloaded, the user's browser may execu...

DSpace Cross Site Scripting (XSS) via a deposited HTML/XML document

Impact In DSpace 7.0 through 7.6.1, when an HTML, XML or JavaScript Bitstream is downloaded, the user's browser may execute any embedded JavaScript. If that embedded JavaScript is malicious, there is a risk of an XSS attack. This attack may only be initialized by a user who already has Submitter...

Fedora: Security Advisory for rust-bitvec_helpers (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-bitvec_helpers-3.1.4-1.fc40

BitVec based bitstream reader and writer...

CVE-2023-39562

GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gfbsalign function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted file...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC v2.3, which originates from the inclusion of heap reuse after release via the gfbsalign function in bitstream.c, allowing an attacker to cause a denial of service DoS by supplying a crafted file...

PT-2023-27023 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev449-g5948e4f70-master Description: The issue is related to a heap-use-after-free vulnerability via the gf bs align function at bitstream.c. This allows attackers to cause a Denial of Service DoS by supplying a crafted...

UBUNTU-CVE-2023-2618

A vulnerability, which was classified as problematic, has been found in OpenCV wechatqrcode Module up to 4.7.0. Affected by this issue is the function DecodedBitStreamParser::decodeHanziSegment of the file qrcode/decoder/decodedbitstreamparser.cpp. The manipulation leads to memory leak. The attac...

PT-2023-20538 · Opencv +2 · Opencv +2

Name of the Vulnerable Software and Affected Versions: OpenCV wechat qrcode Module versions up to 4.7.0 Description: A problematic issue has been found in the OpenCV wechat qrcode Module, affecting the function DecodedBitStreamParser::decodeHanziSegment of the file qrcode/decoder/decoded bit stre...

OpenCV 安全漏洞

OpenCV is an open source, cross-platform, lightweight computer vision library. A security vulnerability exists in the OpenCV wechatqrcode module, which originates from the function DecodedBitStreamParser::decodeHanziSegment in the file qrcode/decoder/decodedbitstreamparser.cpp and could lead to a...

cacheline-ef (>=1.0.0 <=1.1.0), dsi-bitstream (=0.4.2) +7 more potentially affected by unknown CVE via maligned (=0.2.1)

maligned CARGO version =0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on maligned and may be impacted: - cacheline-ef =1.0.0, =0.4.0, =0.6.0, =0.1.6, =0.1.0, =0.4.0, =0.4.2 - vframe =0.3.2 Source cves: unknown CVE Source advisory:...

K31447551: Xilinx Starbleed FPGA vulnerability

Security Advisory Description Design Advisory for 7 Series/Virtex-6 FPGAs: Defeating Bitstream Encryption AR 73541 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently supported releases for...

PT-2022-26778 · Tsmuxer · Tsmuxer

Name of the Vulnerable Software and Affected Versions: tsMuxer version 2.6.16 Description: A heap overflow issue was discovered in the function BitStreamWriter::flushBits located at /tsMuxer/bitStream.h. Recommendations: For tsMuxer version 2.6.16, consider disabling the BitStreamWriter::flushBit...

UBUNTU-CVE-2022-3664

A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4BitStream::WriteBytes of the file Ap4BitStream.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has...