CVE-2016-1621

CVE-2016-1621 affects libvpx in mediaserver on Android (4.x before 4.4.4; 5.x before 5.1.1; 6.0 before 2016-03-01). Root cause: memory corruption in mediaserver triggered by processing crafted media files, linked to libwebm/mkvparser.cpp. Impact: remote code execution or denial of service within ...

CVE-2016-1621

libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug...

CVE-2016-1621

libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug...

CVE-2016-1621: Improper Restriction of Operations within the Bounds of a Memory Buffer

libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug...

PT-2016-1573

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.x through 5.1.0 Android versions 6.0 before 2016-03-01 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted...

PT-2016-1445

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 45.0 Description The issue is related to a race condition in libvpx, which could allow remote attackers to cause a denial of service, specifically a use-after-free error, or possibly have other unspecified...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: MFSA 2016-16 Miscellaneous memory safety hazards rv:45.0 / rv:38.7 MFSA 2016-17 Local file overwriting and potential privilege escalation through CSP reports MFSA 2016-18 CSP reports fail to strip location information for embedded iframe pages MFSA 2016-19 Linux video...

WebRTC and LibVPX vulnerabilities found through code inspection — Mozilla

Security researcher Ronald Crane reported five "moderate" rated vulnerabilities affecting released code that were found through code inspection. These included the following issues in WebRTC: an integer underflow, a missing status check, race condition, and a use of deleted pointers to create new...

CVE-2016-1621

libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug...

FreeBSD : libvpx -- buffer overflow in vp9_init_context_buffers (6ca7eddd-d436-486a-b169-b948436bcf14)

The Mozilla Project reports : Security researcher Khalil Zhani reported that a maliciously crafted vp9 format video could be used to trigger a buffer overflow while parsing the file. This leads to a potentially exploitable crash due to a flaw in the libvpx library. %NASLMINLEVEL 70300 C Tenable...

Mageia: Security Advisory (MGASA-2015-0249)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Firefox ESR browser, which allows a hacker to execute arbitrary code

The vulnerability of the vp9initcontextbuffers function in the libvpx library is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted VP9 file...

Fedora 21 : libvpx-1.3.0-7.fc21 (2015-15935)

libvpx-1.3.0-7.fc21 - set --size-limit=16384x16384 to fix CVE-2015-1258 libvpx-1.3.0-7.fc22 - set --size-limit=16384x16384 to fix CVE-2015-1258 libvpx-1.4.0-5.fc23 - set --size-limit=16384x16384 to avoid CVE-2015-1258 Note that Tenable Network Security has extracted the preceding description bloc...

Oracle: Security Advisory (ELSA-2010-0999)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libvpx FEDORA-2015-15935

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 21 Update: libvpx-1.3.0-7.fc21

libvpx provides the VP8 SDK, which allows you to integrate your applications with the VP8 video codec, a high quality, royalty free, open source codec deployed on millions of computers and devices worldwide...

Mozilla Firefox and Firefox ESR libvpx Buffer Overflow Vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability in the 'vp9initcontextbuffers' function in the Mozilla Firefox libvpx allows remote attackers to construct a malicious WEB page that can be tricked into being parsed by the user to crash the application or execute...

Fedora 22 : libvpx-1.3.0-7.fc22 (2015-15936)

libvpx-1.3.0-7.fc21 - set --size-limit=16384x16384 to fix CVE-2015-1258 libvpx-1.3.0-7.fc22 - set --size-limit=16384x16384 to fix CVE-2015-1258 libvpx-1.4.0-5.fc23 - set --size-limit=16384x16384 to avoid CVE-2015-1258 Note that Tenable Network Security has extracted the preceding description bloc...

Fedora Update for libvpx FEDORA-2015-15936

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: libvpx-1.3.0-7.fc22

libvpx provides the VP8 SDK, which allows you to integrate your applications with the VP8 video codec, a high quality, royalty free, open source codec deployed on millions of computers and devices worldwide...