Lucene search
K

4689 matches found

OSV
OSV
added 2022/01/10 11:15 p.m.27 views

CVE-2021-36408

An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265...

5.5CVSS1.8AI score
Exploits0References3
OSV
OSV
added 2022/01/10 11:15 p.m.1 views

UBUNTU-CVE-2021-36408

An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265...

5.5CVSS6.8AI score0.00103EPSS
Exploits1References5
OSV
OSV
added 2022/01/10 11:15 p.m.0 views

UBUNTU-CVE-2021-36409

There is an Assertion scalinglistpredmatrixiddelta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attackers to cause a Denial of Service DoS by running the application with a crafted file or possibly have unspecified other impact...

7.8CVSS7.2AI score0.00161EPSS
Exploits1References4
Prion
Prion
added 2022/01/10 11:15 p.m.15 views

Heap overflow

An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265...

4.3CVSS5.5AI score0.00103EPSS
Exploits1References3Affected Software2
UbuntuCve
UbuntuCve
added 2022/01/10 11:15 p.m.34 views

CVE-2021-36408

An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265...

5.5CVSS6.8AI score0.00103EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2022/01/10 12:0 a.m.33 views

CVE-2021-36408

An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265...

5.5CVSS6.3AI score0.00103EPSS
Exploits1
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.3 views

Libde265 资源管理错误漏洞

Libde265 is a German h.265 video codec. libde265 suffers from a resource management error vulnerability that stems from a Heap-use-after-free in intrapred.h when decoding files using dec265. No detailed vulnerability details are available...

5.5CVSS5.5AI score0.00103EPSS
Exploits1References6
AlpineLinux
AlpineLinux
added 2022/01/10 12:0 a.m.40 views

CVE-2021-36408

An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265...

5.5CVSS6.9AI score0.00103EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2022/01/10 12:0 a.m.2 views

PT-2022-6473 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: libde265 versions 1.0.8 Description: An issue was discovered in libde265, where there is a Heap-use-after-free in intrapred.h when decoding a file using dec265. This could allow a remote attacker to cause a denial of service. Recommendations:...

9.8CVSS6.6AI score0.00482EPSS
Exploits46References224
CNNVD
CNNVD
added 2022/01/04 12:0 a.m.3 views

多款Qualcomm产品代码问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and are from time to time fabricated on the surface of semiconductor wafers. A code issue vulnerability exists in Qualcomm products that could...

7.5CVSS7.4AI score0.0026EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/01/04 12:0 a.m.4 views

PT-2022-14265 · Mediatek · Libmtkomxgsmdec

Name of the Vulnerable Software and Affected Versions: libMtkOmxGsmDec affected versions not specified Description: The issue is related to an incorrect bounds check in libMtkOmxGsmDec, which could lead to local information disclosure without requiring additional execution privileges. User...

5.5CVSS5.1AI score0.00017EPSS
Exploits0References3
Fedora
Fedora
added 2022/01/01 1:11 a.m.12 views

[SECURITY] Fedora 34 Update: libopenmpt-0.5.15-1.fc34

libopenmpt is a cross-platform C++ and C library to decode tracked music files modules into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project Open ModPlug Tracker. In order to avoid code base fragmentation, libopenmpt is developed in the same source code...

2AI score
Exploits0
CNNVD
CNNVD
added 2022/01/01 12:0 a.m.3 views

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in Wolfssl wolfMQTT that stems from the product's failure to properly determine memory boundaries when calling MqttDecodePublish from...

5.5CVSS6.2AI score0.0021EPSS
Exploits1References4
OSV
OSV
added 2021/12/20 12:12 p.m.3 views

CLSA-2021-1640002354 Fix of CVE: CVE-2021-43527

CVE-2021-43527: Fix memory corruption in decodeECorDsaSignature with DSA signatures and RSA-PSS - Update to CKBI 2.50 from NSS 3.67 - Removing: - Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - Certificate "AddTrust Low-Value Services Root" - Certificate "AddTrust...

9.8CVSS7.3AI score0.05243EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/12/20 12:0 a.m.7 views

Fedora: Security Advisory for dr_libs (FEDORA-2021-c2dc9abd76)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2021/12/17 1:13 a.m.10 views

[SECURITY] Fedora 35 Update: dr_libs-0-0.7.20211208git49de65c.fc35

Single-file audio decoding libraries for C/C++...

2.5AI score
Exploits0
Fedora
Fedora
added 2021/12/17 1:6 a.m.13 views

[SECURITY] Fedora 34 Update: dr_libs-0-0.7.20211208git49de65c.fc34

Single-file audio decoding libraries for C/C++...

2.5AI score
Exploits0
OSV
OSV
added 2021/12/10 1:15 p.m.0 views

CVE-2021-37187

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file with reversible passwords from the device, which allows decoding of other users' passwords...

6.5CVSS6.6AI score
Exploits0References2
OSV
OSV
added 2021/12/10 11:3 a.m.1 views

OESA-2021-1455 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

5.3CVSS6.8AI score0.00563EPSS
Exploits2References2
OSV
OSV
added 2021/11/29 7:15 a.m.1 views

UBUNTU-CVE-2021-21707

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexmlloadfile, URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the...

5.3CVSS6.8AI score0.00563EPSS
Exploits2References5
Rows per page
Query Builder