83 matches found
Integer overflow
The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based buffer overflow and remote code execution...
CVE-2018-12447
The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based buffer overflow and remote code execution...
CVE-2018-12447
The CVE-2018-12447 vulnerability affects libbpg (and libavcodec) via the restore_tqb_pixels function in hevc_filter.c, where an integer overflow can cause a heap-based buffer overflow and remote code execution. Affected stack includes libbpg 0.9.8 and related products; exact vulnerable lines are ...
libbpg VideoLAN x265 Denial of Service Vulnerability
libbpg is a new image format library. videoLAN x265 is one of the H.265 video format libraries. A denial of service vulnerability exists in the 'CUData::initialize' function in the common/cudata.cpp file of VideoLAN x265 in libbpg version 0.9.7 and other products, which stems from the program...
libbpg Integer Overflow Vulnerability
libbpg is a new type of image format library. An integer overflow vulnerability exists in the 'imagealloc' function of the bpgenc.c file in libbpg version 0.9.7. An attacker can exploit this vulnerability to cause a denial of service invalid dynamic memory allocation and null pointer backreferenc...
libbpg libavcodec 'restore_tqb_pixels' function denial of service vulnerability
libbpg is a new image format library. libavcodec is one of the general-purpose encoding/decoding libraries. A security vulnerability exists in the 'restoretqbpixels' function of the hevcfilter.c file of libavcodec used in libbpg version 0.9.7 and other products. A remote attacker could exploit th...
CVE-2017-14034
The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...
CVE-2017-13136
The imagealloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference...
Null pointer dereference
A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure...
Integer overflow
The imagealloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference...
CVE-2017-13135
A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure...
CVE-2017-13135
A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure...
CVE-2017-13136
The imagealloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference...
CVE-2017-14034
The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...
CVE-2017-13135
A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure...
CVE-2017-13136
The imagealloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference...
CVE-2017-13135
CVE-2017-13135 : A NULL pointer dereference in VideoLAN x265 (used in libbpg 0.9.7 and other products) arises because CUData::initialize in common/cudata.cpp mishandles memory-allocation failure. The issue can cause a crash, treated as a denial of service in related advisories. Multiple sources (...
CVE-2017-13136
The CVE-2017-13136 issue affects the libbpg 0.9.7 image encoder (bpgenc.c) where an integer overflow in image_alloc allows an invalid malloc and NULL pointer dereference. Public records (NVD/CNVD/CVE records) describe a potential denial of service via memory corruption/backreference and related h...
CVE-2017-13135
A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure...
CVE-2017-14796
The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service integer underflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copyCTBtohv in hevcfilter.c in libavcodec in...