ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Use-of-uninitialized-value in sao_edge_filter_8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4890980128456704 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Use-of-uninitialized-value in ff_h274_apply_film_grain

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5517722610368512 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

PT-2024-40832 · Git +1 · Gpac

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the hevc ref pic lists modification, gf hevc parse nalu b...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Use-of-uninitialized-value in put_hevc_pel_bi_pixels_9

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6290632570634240 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Use-of-uninitialized-value in add_residual4x4_9

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5920837765496832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in hevc_ref_pic_lists_modification

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5202100800258048 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x7ccec61fead0...

OESA-2024-1936 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg 7.0 is vulnerabl...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Stack-buffer-overflow in ff_hevc_luma_mv_merge_mode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6529417518579712 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Segv on unknown address in boundary_strength

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5908731129298944 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

PT-2024-40805 · Git +1 · Gpac

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions gf hevc parse nalu bs, gf inspect dump nalu internal, and inspect...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in gf_hevc_parse_nalu_bs

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4790561396031488 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7f447fffead0...

SUSE CVE-2024-32228

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevcframeend...

UBUNTU-CVE-2024-32228

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevcframeend...

libheif:file_fuzzer: Heap-buffer-overflow in BitReader::BitReader

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5125411395141632 Project: libheif Fuzzing Engine: afl Fuzz Target: filefuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x502000000814 Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Stack-buffer-overflow in ff_hevc_luma_mv_merge_mode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5104066422702080 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

libheif:file_fuzzer: Heap-buffer-overflow in BitReader::BitReader

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=6588845911506944 Project: libheif Fuzzing Engine: afl Fuzz Target: filefuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5020000008d4 Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Crash in ff_hevc_get_ref_list

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6549698459009024 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000048b4...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Crash in ff_hevc_get_ref_list

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5069068613255168 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000048b4...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in ff_hevc_slice_rpl

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6389604524556288 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

SUSE CVE-2024-35921

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed i...