Integer overflow

DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it...

UBUNTU-CVE-2022-1925

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gstmatroskadecompressdata function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however t...

UBUNTU-CVE-2022-1923

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it...

PT-2022-5193 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is caused by an integer overflow in the gst matroska demux add wvpk header function of the Gstreamer multimedia framework, which can lead to a heap overwrite when parsing matros...

PT-2022-5205 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is caused by an integer overflow in the gst matroska decompress data function of the matroskademux element, which can lead to a segfault or a potential heap overwrite, depending...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer version 1.16.2, which originates from a heap override in gstmatroskademuxaddwvpkheader, and can be exploited by an attacker to cause a system crash...

PT-2022-5192 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is caused by an integer overflow in the gst avi demux invert function of the avidemux element in the Gstreamer multimedia framework. This overflow allows a heap overwrite while...

Security update for vlc (moderate)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2021:0714-1 Rating: moderate References: 1181918 Cross-References: CVE-2020-26664 CVSS scores: CVE-2020-26664 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP2 An...

openSUSE: Security Advisory for vlc (openSUSE-SU-2021:0691-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the gst_avi_demux_parse_ncdt function (gst/avi/gstavidemux.c) in the Gstreamer multimedia framework’s gst-plugins-good plugin. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the gstavidemuxparsencdt function gst/avi/gstavidemux.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the `qtdemux_parse_samples` function (gst/isomp4/qtdemux.c) in the Gstreamer multimedia framework’s Gst-plugins-good plugin allows a hacker to trigger a service failure.

The vulnerability of the qtdemuxparsesamples function located in gst/isomp4/qtdemux.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor ...

The vulnerability of the gst_avi_demux_parse_ncdt function (gst/avi/gstavidemux.c) in the Gstreamer multimedia framework’s gst-plugins-good plugin. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the gstavidemuxparsencdt function gst/avi/gstavidemux.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A use-after-free in the mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A use-after-free in the Control function in demux/mkv/mkv.cpp allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through a possible use-after-free in the Control function of demux/asf/asf.c...

VLC < 2.2.9 Type Conversion Vulnerability

The version of VLC media player installed on the remote host is earlier than 2.2.9. It is, therefore, affected by a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and ...

The vulnerability of the demux/caf.c component of the VideoLAN VLC media player software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the demux/caf.c component of the VideoLAN VLC media player lies in a division-by-zero error. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created CAF file...

The vulnerability in the demux/asf/asf.c component of the VideoLAN VLC media player software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the demux/asf/asf.c component of the VideoLAN VLC media player lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the SeekPercent function in the VideoLAN VLC media player’s demux/asf.c file allows a hacker to cause a service failure.

The vulnerability of the SeekPercent function in the VideoLAN VLC media player’s demux/asf.c file is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

UBUNTU-CVE-2014-9628

The MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow attacks, and consequently execute arbitrary code, via a box size of 7...