215 matches found
Microsoft Windows Media Foundation security vulnerabilities
Microsoft Windows Media Foundation is a multimedia development library from Microsoft that aims to provide a unified multimedia solution for the Windows platform, allowing developers to play video and sound files, encode audio and video, or transcode multimedia files. Media Foundation allows...
libavcodec Audio Video DoS
The vulnerability of the libavcodec library, which is used for encoding and decoding audio and video files in the FFmpeg multimedia library, relates to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...
libavutil Information Disclosure
The vulnerability of the libavutil library, a multimedia library within FFmpeg, relates to the lack of memory release after the effective lifespan of the library has ended. Exploiting this vulnerability can allow an attacker to disclose the protected information...
FFmpeg hevc_frame_end Disclosure
The vulnerability of the hevcframeend function in the FFmpeg multimedia library libavcodec/hevcdec.c relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...
FFmpeg demuxer Buffer Overflow
The vulnerability of the demuxer component in the FFmpeg multimedia library relates to reading data from buffer registers beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created ASF file...
FFmpeg config_input Heap Buffer Overflow DoS
The vulnerability of the configinput function in the afacrossover.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last reference. Exploiting this vulnerability may allow a remote attacker to cause a service failure...
ROS-20240927-01
Vulnerability of FFmpeg multimedia library function loadinputpicture is related to buffer copying without checking input data size. checking the size of the input data. Exploitation of the vulnerability could allow an attacker to execute arbitrary code Vulnerability in interpolate component...
FFmpeg Code Execution
The vulnerability of the showwavesfilterframe component in the FFmpeg multimedia library’s libavfilter/avfshowwaves.c file is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
FFmpeg JPEG XL Code Execution
The vulnerability of the JPEG XL decoder in the FFmpeg multimedia library is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
FFmpeg Access Control Privilege Bypass
The vulnerability of the FFmpeg multimedia library is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
FFmpeg Heap Buffer Overflow DoS
The vulnerability of the FFmpeg multimedia library relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
PT-2023-7934 · FFmpeg · Ffmpeg
Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: The issue is related to a buffer overflow in the FFmpeg multimedia library, which can be exploited to impact the confidentiality, integrity, and availability of protected information...
CVE-2023-38703
PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level transport is not...
[SECURITY] [DSA 5518-1] libvpx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5518-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 05, 2023 https://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-5510-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3598-1] libvpx security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3598-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 01, 2023 https://wiki.debian.org/LTS -...
[SECURITY] [DSA 5510-1] libvpx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5510-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 29, 2023 https://www.debian.org/security/faq -...
Debian DSA-5438-1 : asterisk - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5438 advisory. A flaw was found in Asterisk, an Open Source Private Branch Exchange. A buffer overflow vulnerability affects users that use PJSIP DNS resolver. This vulnerabilit...
ROS-20230620-01
Ffmpeg multimedia library vulnerability is related to NULL pointer dereferencing error in function decodemainheader in libavformat/nutdec.c. Exploitation of the vulnerability could allow an attacker, remotely, trick a victim into opening a specially crafted file and performing a denial-of-service...
