Microsoft Windows Codecs Library 代码注入漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. The application enables computers and devices to read High Efficiency Video Encoding or HEVC video.A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. An attacker could...

KLA12221 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

Microsoft Windows HEVC Codecs Library Multiple Vulnerabilities (July 2021)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by multiple remote code execution vulnerabilities. Remote code execution vulnerabilities exists in the Microsoft Windows Codecs Library HEVC Extension. An attacker who successfully...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in ff_hevc_put_hevc_epel_hv_8_sse

Detailed Report: https://oss-fuzz.com/testcase?key=4526720272171008 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62e00002fb01 Crash State:...

openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707)

This update for perl-Image-ExifTool fixes the following issues : Update to version 12.25 fixes boo1185547 CVE-2021-22204 - JPEG XL support is now official - Added read support for Medical Research Council MRC image files - Added ability to write a number of 3gp tags in video files - Added a new...

Security update for perl-Image-ExifTool (important)

openSUSE Security Update: Security update for perl-Image-ExifTool Announcement ID: openSUSE-SU-2021:0707-1 Rating: important References: 1185547 Cross-References: CVE-2021-22204 CVSS scores: CVE-2021-22204 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15....

PT-2021-6511

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to a stack buffer overflow in the hevc parse vps extension function in MP4Box, a component of the GPAC multimedia platform. This allows attackers to cause a denial of service or execute...

DEBIAN-CVE-2021-30020

In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...

DEBIAN-CVE-2021-30014

There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash...

CVE-2021-30020

In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...

UBUNTU-CVE-2021-30014

There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash...

Integer overflow

There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC 1.0.1 which results in a crash...

UBUNTU-CVE-2021-30020

In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...

CVE-2021-30014

There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash...

PT-2021-18569

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to an integer overflow in the hevc parse slice segment function located in media tools/av parsers.c, which can cause a crash. Recommendations For GPAC version 1.0.1, consider applying a patch...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap overflow vulnerability exists in the gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC version 1.0.1. An attacker can exploit this vulnerability via specially crafted files to cause a...

PT-2021-18573

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue arises in the gf hevc read pps bs internal function, located in media tools/av parsers.c. A crafted file can cause pps-num tile columns to be larger than sizeofpps-column width, resulting in a heap...

HEVC Video Extensions Code Execution

The vulnerability of HEVC Video Extensions is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

HEVC Video Extension Code Execution

The vulnerability of the HEVC Video Extension codec is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

HEVC Video Extension Code Execution

The vulnerability of the HEVC Video Extension codec is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...