Lucene search
+L

117 matches found

OSV
OSV
added 2024/05/03 2:11 a.m.5 views

CVE-2023-40476 GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.8CVSS7.4AI score0.02009EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/05/03 2:11 a.m.20 views

CVE-2023-40476 GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.8CVSS8.9AI score0.02009EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/05/03 2:11 a.m.36 views

CVE-2023-40476

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.8CVSS7.8AI score0.02009EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2024/05/03 2:11 a.m.31 views

CVE-2023-40476

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.8CVSS7.7AI score0.02009EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/04/25 12:0 a.m.10 views

The vulnerability of the h.265 Libde265 implementation lies in buffer overflow attacks, which allow attackers to cause service failures.

The vulnerability of the h.265 Libde265 implementation is related to the amount of memory allocated, which exceeds the maximum supported size of 0x10000000000. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

9.4CVSS5.4AI score0.00232EPSS
SaveExploits0References9Affected Software3
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.18 views

openSUSE: Security Advisory for gstreamer (SUSE-SU-2023:4271-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.01871EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.14 views

openSUSE: Security Advisory for gstreamer (SUSE-SU-2023:4361-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.01871EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:0 a.m.9 views

The vulnerability of the put_epel_hv_fallback() function in the h.265 Libde265 implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putepelhvfallback function in the h.265 Libde265 implementation is related to the issue where the operation’s output goes beyond the buffer boundaries during processing of the unsigned short data type. Exploiting this vulnerability can allow a remote attacker to cause a...

7.8CVSS7.1AI score0.00856EPSS
SaveExploits1References9Affected Software5
OpenVAS
OpenVAS
added 2023/11/07 12:0 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2023:4368-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.01871EPSS
SaveExploits0References4
OSV
OSV
added 2023/11/05 4:29 p.m.6 views

SUSE-SU-2023:4368-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40474: Fixed a remote code execution issue due to improper parsing of H265 encoded video files bsc1215793...

8.8CVSS8.9AI score0.01871EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/03 8:19 a.m.3 views

SUSE-SU-2023:4355-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40474: Fixed a remote code execution issue due to improper parsing of H265 encoded video files bsc1215793...

8.8CVSS8.9AI score0.01871EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2023/11/03 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2023:4350-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.01871EPSS
SaveExploits0References4
OSV
OSV
added 2023/10/30 5:5 p.m.4 views

SUSE-SU-2023:4271-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40474: Fixed a remote code execution issue due to improper parsing of H265 encoded video files bsc1215793...

8.8CVSS8.9AI score0.01871EPSS
SaveExploits0References3
OSV
OSV
added 2023/10/13 11:6 a.m.3 views

OESA-2023-1709 gstreamer1-plugins-bad-free security update

GStreamer is a pipeline-based multi media framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. This package contains plug-ins that are not tested well enough yet, or the code is not of good...

8.8CVSS7.7AI score0.02009EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/09/29 1:47 a.m.4 views

SUSE CVE-2023-40476

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.3CVSS9.1AI score0.02009EPSS
SaveExploits0References10
OSV
OSV
added 2023/09/28 12:0 a.m.3 views

UBUNTU-CVE-2023-40476

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.8CVSS7.4AI score0.02009EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2023/09/28 12:0 a.m.34 views

CVE-2023-40476

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.8CVSS7.1AI score0.02009EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/09/27 12:0 a.m.30 views

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of H265...

8.8CVSS7.1AI score0.02009EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/09/20 12:0 a.m.5 views

PT-2023-5635 · Gstreamer +9 · Gstreamer +9

Name of the Vulnerable Software and Affected Versions: GStreamer affected versions not specified Description: The issue is related to a stack-based buffer overflow in the parsing of H265 encoded video files. This allows remote attackers to execute arbitrary code on affected installations of...

10CVSS7.8AI score0.49013EPSS
SaveExploits8References132
OSV
OSV
added 2023/05/09 2:15 a.m.3 views

CVE-2022-47340

In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

5.5CVSS5.9AI score0.0009EPSS
SaveExploits0References1
Rows per page
Query Builder