serenity:FuzzVP9Decoder: Crash in Video::VP9::Decoder::predict_inter_block

Detailed Report: https://oss-fuzz.com/testcase?key=4766306347843584 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzVP9Decoder Job Type: aflasanserenity Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x781298423c86 Crash State: Video::VP9::Decoder::predictinterblock...

serenity:FuzzVP9Decoder: Heap-buffer-overflow in AK::ErrorOr<void, Media::DecoderError> Media::Video::VP9::Decoder::create_video_

Detailed Report: https://oss-fuzz.com/testcase?key=4591033220923392 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzVP9Decoder Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x521000003900 Crash State: AK::ErrorOr...

Potential memory exhaustion attack due to sparse slice deserialization

Details Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. For instance, in the Proof of Concept written below, someone can specify to set a field of the...

dav1d decoder Code Execution

The vulnerability of the dav1d decoder in iOS, iPadOS, visionOS, macOS, Fedora, and the Safari browser is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Stack-buffer-overflow in ff_hevc_luma_mv_merge_mode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5104066422702080 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Crash in ff_hevc_get_ref_list

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6549698459009024 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000048b4...

Zyxel IKE Packet Decoder - Unauthenticated Remote Code Execution (Metasploit)

Exploit Title: Zyxel IKE Packet Decoder Unauthenticated Remote Code Execution Date: 2023-03-31 Exploit Author: sf Vendor Homepage: https://www.zyxel.com/ Software Link: https://www.zyxel.com/ Version: ATP Firmware version 4.60 to 5.35 inclusive, USG FLEX Firmware version 4.60 to 5.35 inclusive, V...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Crash in ff_hevc_get_ref_list

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5069068613255168 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000048b4...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in ff_hevc_slice_rpl

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6389604524556288 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

PT-2024-32795

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A vulnerability in the Linux kernel has been identified, which can lead to a kernel crash when the fb variable is NULL. The issue is related to a smatch static checker warning in the vdec h264...

PT-2024-30693

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns handling an invalid decoder vsi in the vpu dec init function to ensure the decoder vsi is valid for future use. This is related to the media: mediatek: vcodec componen...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer: Heap-use-after-free in aac_decode_frame_int

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4948335235497984 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACFIXEDfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash...

SUSE CVE-2024-26761

In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window The Linux CXL subsystem is built on the assumption that HPA == SPA. That is, the host physical address HPA the HDM decoder registers are programmed wi...

graphicsmagick:coder_JXL_fuzzer: Heap-buffer-overflow in ImportViewPixelArea

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5200809800302592 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJXLfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Crash in av_channel_layout_uninit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5733527483121664 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACLATMfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000044b...

netty-codec-http: Allocation of Resources Without Limits or Throttling

A flaw was found in the io.netty:netty-codec-http package. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling issues due to the accumulation of data in the HttpPostRequestDecoder. The decoder cumulates bytes in the undecodedChunk buffer until ...

RHEL 4 : nss (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nss: TOCTOU, potential use-after-free in libssl's session ticket processing MFSA 2014-12 CVE-2014-1490 -...

RHEL 6 : fetchmail (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - fetchmail: DoS crash in the base64 decoder upon server NTLM protocol exchange abort right after the initi...

RHEL 7 : gstreamer-plugins-bad-free (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gstreamer: buffer overflow in gsth264sliceparsedecrefpicmarking CVE-2021-3185 - The vmnc decoder in the...

EulerOS 2.0 SP11 : docker-engine (EulerOS-SA-2024-1785)

According to the versions of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache...