107 matches found
openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::WelsReorderRefList
Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5709564312289280 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...
openh264/decoder_fuzzer: Index-out-of-bounds in WelsDec::DecodeCurrentAccessUnit
Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5684912114368512 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerubsanopenh264 Platform Id: linux Crash Type: Index-out-of-bounds Crash...
openh264/decoder_fuzzer: Use-of-uninitialized-value in WelsDec::MapColToList0
Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5765968641392640 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value...
openh264/decoder_fuzzer: Global-buffer-overflow in WelsDec::ParseInterBInfo
Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5676147453460480 Project: openh264 Fuzzer: aflopenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: aflasanopenh264 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...
openh264/decoder_fuzzer: Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay
Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5654741512617984 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value...
Multiple Vulnerabilities in Cisco OpenH264
Cisco OpenH264 is an open source H.264 video codec technology encoder and decoder from Cisco USA. Multiple vulnerabilities exist in Cisco OpenH264, which can be exploited by an attacker to execute arbitrary code or launch a denial-of-service attack in the context of an application running the...
Update OpenH264 plugin to version 1.3 — Mozilla
Mozilla and Cisco developers as well as security researcher Nils reported security and stability bugs affecting the OpenH264 plugin version 1.1. This plugin was available to Desktop Firefox 34 and 35 users as an on-demand download as needed. Security researchers Nils and Hanno Böck also reported...
CVE-2014-8643
Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin GMP sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process...
CVE-2014-8643
Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin GMP sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process...
CVE-2014-8643
Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin GMP sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process...
CVE-2014-8643
CVE-2014-8643 affects Mozilla Firefox on Windows (GMP sandbox escape via GMP/OpenH264 process). The OpenH264/GMP path was demonstrated to bypass sandbox protections, with vulnerable behavior tied to Firefox builds prior to 35.0 on Windows. Connected documents indicate related advisories: Firefox ...
Gecko Media Plugin sandbox escape — Mozilla
Security researcher Nils discovered a mechanism to break out of the Gecko Media Plugin GMP sandbox on Windows systems. The GMP sandbox is currently only used to host h.264 video playback using the OpenH264 plugin but is being developed to host other other media plugins. This bug would allow an...
Cisco OpenH264 Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on applications using vulnerable versions of Cisco OpenH264. The specific flaw exists within the decoder logic. By providing malformed H.264 data to the decoder, an attacker can force a dangling pointer to be referenced after it...
Cisco OpenH264 Heap Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on applications using vulnerable versions of Cisco OpenH264. The specific flaw exists within the decoder logic. By providing malformed H.264 data to the decoder, an attacker can overwrite a heap buffer. This could result in the...
Cisco OpenH264 Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on applications using vulnerable versions of Cisco OpenH264. The specific flaw exists within the decoder logic. By providing malformed H.264 data to the decoder, an attacker can force a dangling pointer to be referenced after it...
Cisco OpenH264 Heap Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on applications using vulnerable versions of Cisco OpenH264. The specific flaw exists within the decoder logic. By providing malformed H.264 data to the decoder, an attacker can overwrite a heap buffer. This could result in the...
CVE-2014-8002
Use-after-free vulnerability in decodeslice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file...
CVE-2014-8001
Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file...
