PT-2018-5509

Name of the Vulnerable Software and Affected Versions: Android kernel Description: A remote denial of service issue exists in the hardware HEVC decoder of Android, where certain media files can cause a page fault. This can lead to the denial of service of a critical system process without requiri...

CVE-2017-0852

A denial of service vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506...

CVE-2017-14034

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...

CVE-2017-14795

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service out-of-bounds read and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with hlspcmsample in hevc.c in libavcodec in FFmp...

CVE-2017-14796

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service integer underflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copyCTBtohv in hevcfilter.c in libavcodec in...

libbpg Denial of Service Vulnerability (CNVD-2017-34777)

libbpg is a new type of image format library. A security vulnerability exists in the 'hevcwriteframe' function of the libbpg.c file in libbpg version 0.9.7. A remote attacker can exploit this vulnerability to cause a denial of service out-of-bounds read and application crash with the help of a...

libbpg Denial of Service Vulnerability (CNVD-2017-34778)

libbpg is a new type of image format library. A security vulnerability exists in the 'hevcwriteframe' function of the libbpg.c file in libbpg version 0.9.7. A remote attacker can exploit this vulnerability to cause a denial of service integer overflow and application crash with the help of a...

PT-2017-13689

Name of the Vulnerable Software and Affected Versions libbpg version 0.9.7 Description The issue is related to the hevc write frame function in libbpg.c, which allows remote attackers to cause a denial of service, resulting in an integer underflow and application crash, or possibly have other...

PT-2017-13688

Name of the Vulnerable Software and Affected Versions libbpg version 0.9.7 Description The issue is related to the hevc write frame function in libbpg.c, which allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, or possibly have other...

CVE-2017-14734

The buildmsps function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to hevcdecodeinit1...

PT-2017-13659

Name of the Vulnerable Software and Affected Versions libbpg version 0.9.7 Description The issue allows remote attackers to cause a denial of service, which can result in a heap-based buffer overflow and application crash, or possibly have other unspecified impacts. This is achieved through a...

libhevc Code Execution

The vulnerability of the libhevc library in the Android operating system’s Media Framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Android Media framework hevc decoder denial of service vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.Media framework hevc decoder is one of the hevc decoders for multimedia development. A denial of service vulnerability exists in Media framework hevc decoder in Android. An attacker...

CVE-2017-0728

A denial of service vulnerability in the Android media framework hevc decoder. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37469795...

CVE-2017-0728

A denial of service vulnerability in the Android media framework hevc decoder. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37469795...

CVE-2017-0728

CVE-2017-0728 is a denial-of-service vulnerability in the Android media framework, specifically the HEVC decoder. Affected products/versions: Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The issue is classified as DoS in the Media framework with absence of explicit exploit details in the ...

CVE-2017-0728

A denial of service vulnerability in the Android media framework hevc decoder. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37469795...

CVE-2017-0728: Undefined Security Weakness

A denial of service vulnerability in the Android media framework hevc decoder. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37469795...

PT-2017-10620

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A denial of service issue exists in the Android media framework, specifically in the hevc decoder. This issue may allow for a denial of service attack. Recommendations Fo...

ffmpeg: Index-out-of-bounds in add_candidate_ref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5012343912136704 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHEVCfuzzer Fuzz target binary: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...