Design/Logic Flaw

Improper size check in sapefdparsemetaHEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file...

Input validation

Improper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via a crafted media file...

CVE-2022-27832

The CVE-2022-27832 entry concerns the media.extractor library, where an improper boundary check can be exploited to cause a denial of service via a crafted media file. Affected component: media.extractor library; root cause: boundary check flaw; impact: denial of service (local attacker, low expl...

CVE-2022-27832

Improper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via a crafted media file...

CVE-2022-27825

Improper size check in sapefdparsemetaHEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file...

CVE-2022-27825

The CVE-2022-27825 vulnerability affects the libsapeextractor library, specifically the sapefd_parse_meta_HEADER function. A faulty size check can allow an out-of-bounds read when processing a crafted media file. This issue is addressed in Samsung SMR Apr-2022 Release 1 (patch package), mitigatin...

CVE-2022-27824

Improper size check of in sapefdparsemetaDESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file...

CVE-2022-27823

Improper size check in sapefdparsemetaHEADERold function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file...

CVE-2022-27823

CVE-2022-27823 affects Samsung SMR libsapeextractor: the sapefd_parse_meta_HEADER_old function may read out of bounds when processing a crafted media file. The issue is rooted in an improper size check, enabling out-of-bounds reads. Impact is described as partial confidentiality and partial avail...

Samsung SMR 缓冲区错误漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. It provides patches for Samsung mobile applications. buffer overflow vulnerability exists in versions prior to Samsung SMR Apr-2022 Release 1, which stems from incorrect size checking in the sapefdparsemetaHEADER function o...

Samsung SMR 缓冲区错误漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. A security vulnerability exists in Samsung SMR, which stems from an incorrect boundary check in the media.extractor library. An attacker could exploit the vulnerability to cause a denial of service via a specially crafted...

Samsung SMR 缓冲区错误漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. It provides patches for Samsung mobile applications. Samsung SMR suffers from a buffer overflow vulnerability that stems from an incorrect size check in the sapefdparsemetaHEADERold function of the libsapeextractor library...

HorizontCMS Code Issues Vulnerabilities

HorizontCMS is a customer relationship management web platform for individual developers. A security vulnerability exists in HorizontCMS before 1.0.0-beta.3, which can be exploited by attackers to upload .htaccess and .hello files by using the media file upload feature...

The vulnerability of the OD_ReadUTF8String function in the odf_code.c component of the multimedia platform GPAC allows a perpetrator to cause a service failure.

The vulnerability of the ODReadUTF8String function in the odfcode.c component of the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created media file...

CVE-2022-26505

A DNS rebinding issue in ReadyMedia formerly MiniDLNA before 1.3.1 allows a remote web server to exfiltrate media files...

GLSA-202105-24 : FFmpeg: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-24 FFmpeg: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially...

Design/Logic Flaw

Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4...

CVE-2022-22820

Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4...

CVE-2022-22820

The CVE-2022-22820 entry affects LINE for Windows prior to version 7.4. The root cause is a lack of media file checks before rendering, which enables an attacker to cause abnormal CPU consumption for the recipient when processing a specially crafted GIF image. Impact is resource exhaustion on the...

WordPress WP Ultimate CSV Importer plugin <= 6.4 - Arbitrary Media File Deletion vulnerability

Arbitrary Media File Deletion vulnerability restricted to the uploads folder of the current year/month discovered in WordPress WP Ultimate CSV Importer plugin versions = 6.4. Solution Update the WordPress WP Ultimate CSV Importer plugin to the latest available version at least 6.4.1...