Memory Corruption Vulnerability in Mango TV Client

Mango TV is the only Internet video platform under Hunan Radio and Television, exclusively providing HD video live on-demand broadcasting of all Hunan TV programs, as well as supporting the playback of a variety of local videos. A memory corruption vulnerability exists in the MangoTV client when...

Memory corruption vulnerability exists in Baidu Video (CNVD-2017-35530)

Baidu Video is a new experience player newly launched by Baidu. It supports video and audio files in mainstream media formats and realizes local playback and online on-demand playback. A memory corruption vulnerability exists in Baidu Video Player when parsing special mkv format videos, which can...

Memory Corruption Vulnerability in Video Pioneer for PC

Video Pioneer is a software that can play video and audio online based on P2P Cloud 3D technology, supporting multiple streaming protocols, multiple audio and video formats. A memory corruption vulnerability exists in the Pioneer Player when parsing special mkv files, which can be exploited by...

libEBML Information Disclosure Vulnerability

libEBML is a C++ library maintained by the Matroska team for parsing EBML an audio/video framework files. A security vulnerability exists in libEBML. The vulnerability can be exploited to cause a denial of service off-by-few reads or information disclosure by means of specially crafted unicode...

libEBML Double Release Vulnerability

libEBML is a C++ library maintained by the Matroska team for parsing EBML an audio/video framework files. A double release vulnerability exists in libEBML. An attacker can exploit this vulnerability by leveraging the Track element of the MKV container to cause post-release reuse...

DEBIAN-CVE-2016-2464

libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted mkv file, aka internal bug 23167726...

UBUNTU-CVE-2015-8792

The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access...

Matroska libebml EbmlUnicodeString Heap Information Leak

Talos Vulnerability Report TALOS-2016-0036 Matroska libebml EbmlUnicodeString Heap Information Leak January 28, 2016 CVE Number CVE-2015-8790 Description A specially crafted unicode string can cause an off-by-few read on the heap in unicode string parsing code in libebml. This issue can potential...

Vulnerabilities in the Android operating system that allow a hacker to trigger a service failure

Multiple vulnerabilities in the addVorbisCodecInfo function of the libstagefright library in the Android operating system are related to integer overflow. Exploiting these vulnerabilities could allow a malicious actor to cause service failures by using specially crafted Matroska-formatted data...

Android integer overflow vulnerability (CNVD-2015-06608)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. An integer overflow vulnerability exists in LMY48M, a version of Android prior to 5.1.1, which allows remote attackers to cause a denial of service attack via specially...

CVE-2015-3861

Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service device inoperability via crafted Matroska data, aka internal bug 21296336...

CVE-2015-3861

Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service device inoperability via crafted Matroska data, aka internal bug 21296336...

Integer overflow

Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service device inoperability via crafted Matroska data, aka internal bug 21296336...

CVE-2015-3861

CVE-2015-3861 targets Android mediaserver (libstagefright) via the Matroska MatroskaExtractor.cpp path. Multiple integer overflows in addVorbisCodecInfo cause memory corruption leading to a denial of service (device inoperability) when processing crafted Matroska data, affecting Android versions ...

Android mediaserver service integer overflow denial of service vulnerability

mediaserver is a service used by Android to index media files on devices. An integer overflow vulnerability exists in Android versions 4.3 Jelly Bean-5.1.1 Lollipop of mediaserver when processing malformed MKV files. A remote attacker exploiting this vulnerability via a malicious Android app or...

chromium-browser: use-after-free in FFmpeg

Use-after-free vulnerability in the matroskareadseek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers...

Google Chrome FFmpeg memory misreference vulnerability (CNVD-2015-00703)

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. A memory misreference vulnerability in the Google Chrome libavformat/matroskadec.c matroskareadseek function implementation allows an attacker to construct a malicious WEB page and trick the user into parsin...

CVE-2014-7933

Use-after-free vulnerability in the matroskareadseek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers...

CVE-2014-7933

Use-after-free vulnerability in the matroskareadseek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers...

DEBIAN-CVE-2014-7933

Use-after-free vulnerability in the matroskareadseek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers...