3 matches found
graphicsmagick:coder_MP4_fuzzer: Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5217760023216128 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMP4fuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
Debian DSA-2218-1 : vlc - heap-based buffer overflow
Aliz Hammond discovered that the MP4 decoder plugin of VLC, a multimedia player and streamer, is vulnerable to a heap-based buffer overflow. This has been introduced by a wrong data type being used for a size calculation. An attacker could use this flaw to trick a victim into opening a specially...