[SECURITY] Fedora 36 Update: golang-github-francoispqt-gojay-1.2.13-7.fc36

GoJay is a performant JSON encoder/decoder for Golang currently the most performant, see benchmarks. It has a simple API and doesn't use reflection. It relies on small interfaces to decode/encode structures and slices. Gojay also comes with powerful stream decoding features and an even faster...

imagemagick:encoder_ept2_fuzzer: Heap-buffer-overflow in ImportQuantumPixels

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4697394689736704 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderept2fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

CVE-2022-33069

Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment at SMTEncoder.cpp...

imagemagick:encoder_tiff_fuzzer: Heap-buffer-overflow in ImportQuantumPixels

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4948253692526592 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodertifffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

Denial Of Service (DoS)

@discordjs/opus is vulnerable to denial of service. An attacker is able cause an application crash via sending crafted requests through an encoder with zero channels, or a non-initialized buffer...

CVE-2022-25345

All versions of package @discordjs/opus are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash...

CVE-2022-25345

CVE-2022-25345 affects the npm package @discordjs/opus. The root cause is improper error handling when encoding with an encoder that has zero channels or a non-initialized buffer, causing a Denial of Service via a hard crash. Exploitation details are not provided in the documents. Mitigation note...

CVE-2022-25345

All versions of package @discordjs/opus are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash...

Adobe Media Encoder Memory Corruption Vulnerability (CNVD-2022-50236)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. A memory corruption vulnerability exists in Adobe Media Encoder version 15.4 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the current...

Adobe Media Encoder Memory Corruption Vulnerability (CNVD-2022-50235)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. A memory corruption vulnerability exists in Adobe Media Encoder version 15.4 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the current user environmen...

CVE-2021-43756

Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

CVE-2021-43756

Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

Cross site scripting

Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

CVE-2021-43756 Adobe Media Encoder Memory Corruption Vulnerability could lead to Remote Code Execution

Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

CVE-2021-43756 Adobe Media Encoder Memory Corruption Vulnerability could lead to Remote Code Execution

Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

CVE-2021-43756

CVE-2021-43756 affects Adobe Media Encoder versions 22.0 and 15.4.2 (and earlier). The issue is an Out-of-bounds Write memory corruption that could allow arbitrary code execution in the context of the current user, triggered when a user opens a malicious file. Exploitation requires user interacti...

CVE-2021-43756: Out-of-bounds Write

Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

Adobe Media Encoder Multiple Arbitrary Code Execution Vulnerability (APSB21-70) - Windows

Adobe Media Encoder is prone to Arbitrary Code Execution vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

CVE-2021-46817

Adobe Media Encoder version 15.4 and earlier are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict...

CVE-2021-46818

Adobe Media Encoder version 15.4 and earlier are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict...