Microsoft Windows HEVC Video Extension from Device Manufacturer RCE (August 2023)

The Windows 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploits this vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially...

Microsoft Windows HEVC Video Extensions RCE (August 2023)

The Windows 'HEVC Video Extensions' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploits this vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted...

CVE-2023-38170

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2023-38170

HEVC Video Extensions Remote Code Execution Vulnerability...

Remote code execution

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2023-38170

CVE-2023-38170 concerns the HEVC Video Extensions component on Windows. The vulnerability is a remote code execution issue tied to the HEVC Video Extensions, with the CVSSv3.1 vector indicating a local attack requiring user interaction and potential for arbitrary code execution with high impact (...

CVE-2023-38170 HEVC Video Extensions Remote Code Execution Vulnerability

...

CVE-2023-38170 HEVC Video Extensions Remote Code Execution Vulnerability

...

HEVC Video Extensions Remote Code Execution Vulnerability

...

Microsoft HEVC Video Extensions 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions, which can be exploited by an...

CVE-2023-38170: Heap-based Buffer Overflow

HEVC Video Extensions Remote Code Execution Vulnerability...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Memcpy-param-overlap in put_hevc_pel_uni_pixels_10

Detailed Report: https://oss-fuzz.com/testcase?key=4992746590175232 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0xf6635d00,0xf6635d10 and 0xf6635cfc, 0xf6635d0...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Memcpy-param-overlap in put_hevc_pel_uni_pixels_10

Detailed Report: https://oss-fuzz.com/testcase?key=4992746590175232 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0xf6635d00,0xf6635d10 and 0xf6635cfc, 0xf6635d0...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Memcpy-param-overlap in put_hevc_pel_uni_pixels_8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4915653244223488 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Index-out-of-bounds in ff_hevc_slice_rpl

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5834725318328320 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Segv on unknown address in av_freep

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5110328710266880 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in pps_multilayer_extension

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4505349045747712 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Memcpy-param-overlap in put_hevc_pel_uni_pixels_9

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4717458841010176 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Index-out-of-bounds in pps_multilayer_extension

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4536557859373056 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the ffhevcputhevcqpelpixels8sse function in the H.265 Libde265 video codec implementation is related to copying buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...