Linux Distros Unpatched Vulnerability : CVE-2018-6156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a...

ROS-20250625-01

Vulnerability of ffhevcputweightedpredavg8sse function of h.265 Libde265 video codec implementation is related to operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service using a specially crafted vid...

CVE-2024-57184

An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gfm2tsprocesspmt in mediatools/mpegts.c:2163 that can cause a denial of service DOS via a crafted MP4 file...

CVE-2024-49776

A negative-size-param in tsMuxer version nightly-2024-04-05-01-53-02 allows attackers to cause Denial of Service DoS via a crafted TS video file...

CVE-2022-43249

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via putepelhvfallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

CVE-2022-43238

Libde265 v1.0.8 was discovered to contain an unknown crash via ffhevcputhevcqpelh3v3sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

CVE-2022-43252

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via putepel16fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

nginx: Memory disclosure in the ngx_http_mp4_module

A vulnerability was found in NGINX’s module, ngxhttpmp4module. This flaw allows a local attacker to cause a worker process crash or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products built with ngxhttpmp4module...

The vulnerabilities of the decoding functions in the OpenH264 library allow a perpetrator to execute arbitrary code.

The vulnerability of the decoding functions of the OpenH264 library is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted video file...

PT-2026-3089

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A heap overflow exists in the uncv parse config function. This issue can be triggered by processing a specially crafted MP4 file, potentially leading to a Denial of Service DoS. Recommendations Update to a newer...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n6.1.1, which stems from the presence of an integer overflow that could allow an attacker to trigger a denial of service in an application...

CVE-2024-52613

A heap-based buffer under-read in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service DoS via a crafted MOV video file...

CVE-2024-49776

A negative-size-param in tsMuxer version nightly-2024-04-05-01-53-02 allows attackers to cause Denial of Service DoS via a crafted TS video file...

The vulnerability of the decode_plane function in the libavcodec/utvideodec.c file of the FFmpeg multimedia library, which involves reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause a service failure.

The vulnerability of the decodeplane function in the libavcodec/utvideodec.c file of the FFmpeg multimedia library relates to reading data from beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially created AVI...

The vulnerability of the libavcodec/cbs_av1.c component in the FFmpeg multimedia library, related to unvalidated array indexing, allows a hacker to cause a service failure.

The vulnerability of the libavcodec/cbsav1.c component in the FFmpeg multimedia library is related to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures using a specially created AV1 file...

CVE-2024-44232

CVE-2024-44232: Apple platforms (macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1, tvOS 18.1, iOS 17.7.1 and iPadOS 17.7.1; iOS 18.1 and iPadOS 18.1) fixed by improved bounds checks. Parsing a malicious video file may cause an unexpected system termination. Remediation is to ...

CVE-2024-44234

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a maliciously crafted video file may lead to unexpected...

CVE-2024-44234

CVE-2024-44234 affects multiple Apple platforms (iOS/iPadOS/macOS/tvOS/visionOS/watchOS). The issue stems from improper bounds checks when parsing a maliciously crafted video file, which may lead to an unexpected system termination (crash). The vulnerability is fixed in: iOS 17.7.1 / iPadOS 17.7....

PT-2024-30992 · Apple · Itunes +1

Name of the Vulnerable Software and Affected Versions: Apple TV versions prior to 1.5.0.152 iTunes versions prior to 12.13.3 Description: A stack buffer overflow issue was addressed through improved input validation. Parsing a maliciously crafted video file may lead to unexpected system...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15, which stems from the fact that processing a maliciously crafted video file may cause the application to terminate...