Lucene search
K

83 matches found

Prion
Prion
added 2018/06/15 1:29 p.m.11 views

Integer overflow

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based buffer overflow and remote code execution...

6.8CVSS9.1AI score0.03759EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2018/06/15 1:0 p.m.19 views

CVE-2018-12447

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based buffer overflow and remote code execution...

9.2AI score0.03759EPSS
Exploits1References2
CVE
CVE
added 2018/06/15 1:0 p.m.33 views

CVE-2018-12447

The CVE-2018-12447 vulnerability affects libbpg (and libavcodec) via the restore_tqb_pixels function in hevc_filter.c, where an integer overflow can cause a heap-based buffer overflow and remote code execution. Affected stack includes libbpg 0.9.8 and related products; exact vulnerable lines are ...

8.8CVSS9.1AI score0.03759EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2017/11/22 12:0 a.m.1 views

libbpg VideoLAN x265 Denial of Service Vulnerability

libbpg is a new image format library. videoLAN x265 is one of the H.265 video format libraries. A denial of service vulnerability exists in the 'CUData::initialize' function in the common/cudata.cpp file of VideoLAN x265 in libbpg version 0.9.7 and other products, which stems from the program...

7.8CVSS6.8AI score0.01161EPSS
Exploits1References1
CNVD
CNVD
added 2017/11/22 12:0 a.m.1 views

libbpg Integer Overflow Vulnerability

libbpg is a new type of image format library. An integer overflow vulnerability exists in the 'imagealloc' function of the bpgenc.c file in libbpg version 0.9.7. An attacker can exploit this vulnerability to cause a denial of service invalid dynamic memory allocation and null pointer backreferenc...

8.8CVSS7AI score0.01296EPSS
Exploits1References1
CNVD
CNVD
added 2017/11/21 12:0 a.m.1 views

libbpg libavcodec 'restore_tqb_pixels' function denial of service vulnerability

libbpg is a new image format library. libavcodec is one of the general-purpose encoding/decoding libraries. A security vulnerability exists in the 'restoretqbpixels' function of the hevcfilter.c file of libavcodec used in libbpg version 0.9.7 and other products. A remote attacker could exploit th...

8.8CVSS6.9AI score0.01522EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2017/11/16 4:29 a.m.8 views

CVE-2017-14034

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...

8.8CVSS7.4AI score0.01522EPSS
Exploits1References2
OSV
OSV
added 2017/11/16 4:29 a.m.1 views

CVE-2017-13136

The imagealloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference...

8.8CVSS5.8AI score0.01296EPSS
Exploits1References1
Prion
Prion
added 2017/11/16 4:29 a.m.9 views

Null pointer dereference

A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure...

6.8CVSS7.6AI score0.01161EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2017/11/16 4:29 a.m.11 views

Integer overflow

The imagealloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference...

6.8CVSS8.6AI score0.01296EPSS
Exploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2017/11/16 4:29 a.m.18 views

CVE-2017-13135

A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure...

7.8CVSS7.1AI score0.01161EPSS
Exploits1References4
NVD
NVD
added 2017/11/16 4:29 a.m.17 views

CVE-2017-13135

A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure...

7.8CVSS7.6AI score0.01161EPSS
Exploits1References2
NVD
NVD
added 2017/11/16 4:29 a.m.11 views

CVE-2017-13136

The imagealloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference...

8.8CVSS8.7AI score0.01296EPSS
Exploits1References1
NVD
NVD
added 2017/11/16 4:29 a.m.13 views

CVE-2017-14034

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...

8.8CVSS9.2AI score0.01522EPSS
Exploits1References1
OSV
OSV
added 2017/11/16 4:29 a.m.6 views

CVE-2017-13135

A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure...

7.8CVSS7.6AI score
Exploits0References2
Cvelist
Cvelist
added 2017/11/16 4:0 a.m.19 views

CVE-2017-13136

The imagealloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference...

8.7AI score0.01296EPSS
Exploits1References1
CVE
CVE
added 2017/11/16 4:0 a.m.44 views

CVE-2017-13135

CVE-2017-13135 : A NULL pointer dereference in VideoLAN x265 (used in libbpg 0.9.7 and other products) arises because CUData::initialize in common/cudata.cpp mishandles memory-allocation failure. The issue can cause a crash, treated as a denial of service in related advisories. Multiple sources (...

7.8CVSS7.5AI score0.01161EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2017/11/16 4:0 a.m.47 views

CVE-2017-13136

The CVE-2017-13136 issue affects the libbpg 0.9.7 image encoder (bpgenc.c) where an integer overflow in image_alloc allows an invalid malloc and NULL pointer dereference. Public records (NVD/CNVD/CVE records) describe a potential denial of service via memory corruption/backreference and related h...

8.8CVSS8.6AI score0.01296EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2017/11/16 4:0 a.m.14 views

CVE-2017-13135

A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure...

7.8CVSS2.9AI score0.01161EPSS
Exploits1
OSV
OSV
added 2017/09/28 1:29 a.m.3 views

CVE-2017-14796

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service integer underflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copyCTBtohv in hevcfilter.c in libavcodec in...

8.8CVSS5.9AI score
Exploits0References1
Rows per page
Query Builder