CVE-2023-44488

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding...

PT-2023-5682 · Libvpx +9 · Libvpx +9

Name of the Vulnerable Software and Affected Versions: libvpx versions prior to 1.13.1 Description: The issue is related to the mishandling of widths in the VP9 codec of the libvpx library, leading to a crash related to encoding. This can be exploited by a remote attacker using a specially crafte...

CVE-2023-5217

A heap-based buffer overflow flaw was found in the way libvpx, a library used to process VP8 and VP9 video codecs data, processes certain specially formatted video data via a crafted HTML page. This flaw allows an attacker to crash or remotely execute arbitrary code in an application, such as a w...

OSV-2023-844 Heap-buffer-overflow in Video::VP9::Decoder::create_video_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62307 Crash type: Heap-buffer-overflow READ Crash state: Video::VP9::Decoder::createvideoframe Video::VP9::Decoder::decodeframe Video::VP9::Decoder::receivesample...

PT-2023-36009 · Libvp9 · Libvp9

Name of the Vulnerable Software and Affected Versions: libvp9 affected versions not specified Description: The issue is related to a heap-buffer-overflow read in the libvp9 library. The crash occurs in the Video::VP9::Decoder module, specifically in the create video frame, decode frame, and recei...

serenity:FuzzVP9Decoder: Heap-buffer-overflow in Video::VP9::Decoder::create_video_frame

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4812208212934656 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzVP9Decoder Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

Security Updates for Microsoft Windows VP9 Video Extensions Library (July 2023)

The Windows 'VP9 Extensions' app installed on the remote host is affected by an information disclosure vulnerability. An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory. Exploitation of the vulnerability requires that an attacker must se...

CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability...

CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability...

CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability...

Information disclosure

VP9 Video Extensions Information Disclosure Vulnerability...

CVE-2023-36872

CVE-2023-36872 refers to an information-disclosure flaw in the Microsoft Windows VP9 Video Extensions library. Public sources in the connected set describe the vulnerability as allowing an attacker to read small portions of heap memory when a user opens a specially crafted file, requiring user in...

CVE-2023-36872 VP9 Video Extensions Information Disclosure Vulnerability

...

CVE-2023-36872 VP9 Video Extensions Information Disclosure Vulnerability

...

VP9 Video Extensions Information Disclosure Vulnerability

...

CVE-2023-36872: Improper Input Validation

VP9 Video Extensions Information Disclosure Vulnerability...

OSV-2023-538 Heap-buffer-overflow in Gfx::BooleanDecoder::initialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60262 Crash type: Heap-buffer-overflow READ 7 Crash state: Gfx::BooleanDecoder::initialize Video::VP9::FrameContext::createrangedecoder Video::VP9::Parser::compressedheader...

serenity:FuzzVP9Decoder: Heap-buffer-overflow in Gfx::BooleanDecoder::initialize

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5846892286967808 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzVP9Decoder Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address:...

SUSE CVE-2015-4506

Buffer overflow in the vp9initcontextbuffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file...

SUSE CVE-2018-6406

The function ParseVP9SuperFrameIndex in common/libwebmutil.cc in libwebm through 2018-01-30 does not validate the childframelength data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service heap-based buffer over-read and later out-of-bounds...