Adobe Media Encoder Heap Buffer Overflow DoS

The vulnerability of the Adobe Media Encoder application relates to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...

EulerOS 2.0 SP9 : openjpeg2 (EulerOS-SA-2022-1454)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjp...

OESA-2022-1611 flac security update

FLAC stands for Free Lossless Audio Codec, an audio format similar to MP3, but lossless, meaning that audio is compressed in FLAC without any loss in quality. Security Fixes: In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check...

SIXEL Libsixel Encoder Buffer Overflow DoS

The vulnerability of the sixelencoderoutputwithoutmacro function in the encoder.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting a speciall...

USN-5366-1: FriBidi vulnerabilities

It was discovered that FriBidi incorrectly handled processing of input strings resulting in memory corruption. An attacker could use this issue to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. CVE-2022-25308 It was discovered that FriBidi...

Adobe Media Encoder Buffer Overflow Info Disclosure

The vulnerability of the Adobe Media Encoder application relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

imagemagick:encoder_heic_fuzzer: Stack-use-after-return in void apply_sao_internal<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=6338853398511616 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderheicfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address: 0x7fb66d781ca4 Crash State: void...

fribidi 缓冲区错误漏洞

fribidi is an open source implementation of a bi-directional Unicode algorithm. A security vulnerability exists in fribidi that stems from FriBidi incorrectly validating input data from the CapRTL unicode encoder, resulting in memory corruption. An attacker exploiting this vulnerability could cau...

SIXEL Libsixel Encoder/Decoder Heap Buffer Overflow DoS

The vulnerability of the stbimage.h component in the SIXEL Libsixel encoder/decoder implementation is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially created PSD file...

imagemagick:encoder_miff_fuzzer: Heap-use-after-free in LocaleCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4712380438806528 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodermifffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-use-after-free READ 1...

[SECURITY] Fedora 36 Update: python-ujson-5.1.0-1.fc36

UltraJSON is an ultra fast JSON encoder and decoder written in pure C with bindings for Python...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=6046886602080256 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

CVE-2021-40777

Adobe Media Encoder version 15.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-40782

Adobe Media Encoder 15.4.1 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this...

CVE-2021-40779

Adobe Media Encoder version 15.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-40780

Adobe Media Encoder version 15.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-40781

Adobe Media Encoder 15.4.1 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this...

CVE-2021-40778

Adobe Media Encoder 15.4.1 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this...

CVE-2021-40777

Adobe Media Encoder version 15.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-40782

Adobe Media Encoder 15.4.1 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this...