Design/Logic Flaw

A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a Cisco Meeting Server media process to restart unexpectedly when it receives an illegal H.264 frame. The vulnerability is triggered by an H.264 frame that has an invalid...

CVE-2017-12311

A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a Cisco Meeting Server media process to restart unexpectedly when it receives an illegal H.264 frame. The vulnerability is triggered by an H.264 frame that has an invalid...

CVE-2017-12311

CVE-2017-12311: Cisco Meeting Server contains an H.264 decoder vulnerability that can be exploited remotely by sending a malformed H.264 frame with an invalid PPS, triggering a DoS by causing the media process to restart. Impact is a brief service interruption as the media session re-establishes ...

FFmpeg Buffer Out-of-Bounds Read Vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer out-of-bounds read vulnerability exists in the readheader function in libavcodec/ffv1dec.c in 3.3.4 and earlier versions of Ffmpeg. An...

Google PDFium TIFF Image Flate Decoder Code Execution Vulnerability(CVE-2017-5133)

Summary An off-by-one read/write on the heap vulnerability exists in the TIFF image decoder functionality of Pdfium as used by Google Chrome up to and including 60.0.3112.101. A specially crafted PDF file can trigger an off-by-one read and write on the heap resulting in memory corruption and a...

Google PDFium TIFF Image Flate Decoder Code Execution Vulnerability

Google PDFium is Google in the BSD 3-Clause license under the open source , based on Foxit technology , embedded in Google Chrome's PDF rendering engine . Google PDFium TIFF Image Flate decoder there are code execution vulnerabilities, attackers can exploit the vulnerabilities lead to memory...

Memory Leaks Through Double-free

FFmpeg is vulnerable to memory leaks. These occur through a double-free vulnerability cause when parsing an AVI file to a MKV file using the ffvhuff decoder...

Google PDFium TIFF Image Flate Decoder Code Execution Vulnerability

Summary An off-by-one read/write on the heap vulnerability exists in the TIFF image decoder functionality of Pdfium as used by Google Chrome up to and including 60.0.3112.101. A specially crafted PDF file can trigger an off-by-one read and write on the heap resulting in memory corruption and a...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4923578240729088 Project: librawspeed Fuzzer: libFuzzerlibrawspeedRawParserFuzzer-GetDecoder-Decode Fuzz target binary: RawParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

[SECURITY] Fedora 27 Update: mpg123-1.25.6-1.fc27

Real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 and 3 most commonly MPEG 1.0 layer 3 aka MP3, as well as re-usable decoding and output libraries...

Adobe Acrobat Reader DC jpeg decoder Remote Code Execution Vulnerability(CVE-2017-2971)

Summary A use of uninitialized memory vulnerability exists in JPEG image file format decoding code of Adobe Acrobat Reader which ultimately leads to a heap-based buffer overflow which can be abused to achieve remote code execution. A specially crafted PDF file with an embedded JPEG can trigger th...

[SECURITY] Fedora 25 Update: mpg123-1.25.6-1.fc25

Real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 and 3 most commonly MPEG 1.0 layer 3 aka MP3, as well as re-usable decoding and output libraries...

USN-3420-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description USN-3420-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04...

[SECURITY] Fedora 26 Update: mpg123-1.25.6-1.fc26

Real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 and 3 most commonly MPEG 1.0 layer 3 aka MP3, as well as re-usable decoding and output libraries...

CVE-2015-6673

Use-after-free vulnerability in Decoder.cpp in libpgf before 6.15.32...

UBUNTU-CVE-2015-6673

Use-after-free vulnerability in Decoder.cpp in libpgf before 6.15.32...

Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3420-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3420-2 advisory. USN-3420-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...

Ubuntu: Security Advisory (USN-3420-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MP3Gain mpglibDBL buffer overflow vulnerability (CNVD-2017-33787)

MP3Gain is a MP3 file volume adjustment application. mpglibDBL is one of the MPEG file decoders. A buffer overflow vulnerability exists in the copymp of the interface.c file of mpglibDBL in MP3Gain. A remote attacker could exploit this vulnerability to cause a denial of service or possibly execut...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3420-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3420-1 advisory. It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux kernel when handling L2CAP configuration responses. A physically...