CVE-2023-32851

In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016652; Issue ID: ALPS08016652...

Out-of-bounds

In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016652; Issue ID: ALPS08016652...

Integer overflow

In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016659; Issue ID: ALPS08016659...

CVE-2023-32851

CVE-2023-32851 involves a MediaTek MediaTek decoder vulnerability: an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with user interaction required. The issue is tracked with patch ID ALPS08016652 (and Issue ID ALPS08016652); no exploitation details o...

CVE-2023-32851

In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016652; Issue ID: ALPS08016652...

CVE-2023-32850

CVE-2023-32850 concerns MediaTek’s decoder component (MediaTek MTK ALPS08016659) where an integer overflow can cause an out-of-bounds write. This may enable local privilege escalation with user interaction required for exploitation. The available public details identify Patch ID ALPS08016659/Issu...

CVE-2023-32850

In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016659; Issue ID: ALPS08016659...

PT-2023-27252 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible out of bounds write due to a heap buffer overflow in the a2dp vendor opus decoder decode packet function of a2dp vendor opus decoder.cc. This could le...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips due to an integer overflow issue in the decoder module, which may result in out-of-bounds writes...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a type confusion issue in the vdec module, which may result in out-of-bounds writes...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the decoder module, which may result in out-of-bounds writes...

PT-2023-24074 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In a decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional...

PT-2023-24073 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In a decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5145151399657472 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

WS-2023-0428

With this notification I would like to inform about a DoS vector in the Ethereum ABI decoder. We have not yet found a way to exploit this with high impact, still the bug could potentially lead to a DoS in server systems. Feel free to ask about an extension of the embargo period. Trail of Bits is...

libavc:svc_dec_fuzzer: Heap-buffer-overflow in isvcd_process_residual_resample_mb

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=6151544248336384 Project: libavc Fuzzing Engine: afl Fuzz Target: svcdecfuzzer Job Type: aflasanlibavc Platform Id: linux Crash Type:...

libavc:svc_dec_fuzzer: Crash in ih264d_fill_bs1_16x16mb_pslice

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4760994878193664 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzermsanlibavc Platform Id: linux...

libavc:svc_dec_fuzzer: Crash in ih264d_rep_mv_colz

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=5809057952563200 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzermsanlibavc Platform Id: linux...

Ethereum ABI decoder DoS when parsing ZST

With this notification I would like to inform about a DoS vector in the Ethereum ABI decoder. We have not yet found a way to exploit this with high impact, still the bug could potentially lead to a DoS in server systems. Feel free to ask about an extension of the embargo period. Trail of Bits is...

PT-2023-33060 · Unknown +1 · Ethereum Abi Decoder +1

Name of the Vulnerable Software and Affected Versions: Ethereum ABI decoder affected versions not specified Description: A potential denial-of-service DoS vector exists in the Ethereum ABI decoder due to the specification allowing zero-sized-types ZST. This can cause excessive resource consumptio...