CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49460

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decodeuncompressedimage...

CVE-2023-49462

CVE-2023-49462 affects libheif 1.17.5, with a segmentation fault in /libheif/exif.cc. The issue can cause instability and, per related advisories, may lead to denial of service; some sources imply potential for broader impact. Affected ecosystems cite multiple vendors (Debian, Mageia, Ubuntu, etc...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49464

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...

CVE-2023-49460

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decodeuncompressedimage...

CVE-2023-49464

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...

CVE-2023-49463

libheif v1.17.5 was discovered to contain a segmentation violation via the function findexiftag at /libheif/exif.cc...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

Debian dla-3676 : horizon-doc - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3676 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3676-1 [email protected] https://www.debian.org/lts/security/...

Rocky Linux 9 : freetype (RLSA-2022:8340)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8340 advisory. - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface. CVE-2022-2740...

Bento4 Denial of Service Vulnerability (CNVD-2023-66174)

Bento4 is an open source C++ library for reading and writing MP4 files. A denial-of-service vulnerability exists in Bento4, which stems from the AP4Processor::ProcessFragments function in mp4crypt containing a segmentation violation that can be exploited by an attacker to cause a denial-of-servic...

CVE-2023-38666

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...

Code injection

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...

CVE-2023-38666

CVE-2023-38666 affects Bento4 v1.6.0-639, where a segmentation fault occurs in the AP4_Processor::ProcessFragments function within mp4encrypt. The vulnerability is described as a denial-of-service risk. PT-2023-26539 recommends temporarily disabling AP4 Processor::ProcessFragments as a workaround...

CVE-2023-38666

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...

CVE-2023-38666

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...

OESA-2023-1486 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

CVE-2023-39113

ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulnerability is triggered when running the program gif2tga...

CVE-2023-39113

ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulnerability is triggered when running the program gif2tga...