1051 matches found
CVE-2022-22059
Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
files.photo.gallery command injection
A command injection vulnerability in the video thumbnail rendering component of files.photo.gallery v0.3.0 through 0.11.0 allows remote attackers to execute arbitrary code via a crafted video file...
CVE-2024-53615
CVE-2024-53615 affects files.gallery (files.gallery) versions 0.3.0–0.11.0, where the video thumbnail rendering component is vulnerable to command injection. The root cause is that user-controlled file paths are used to construct an ffmpeg-based command, allowing remote attackers to execute arbit...
Security update for nginx
This update for nginx fixes the following issues: CVE-2023-44487: Mitigate HTTP/2 Rapid Reset Attack bsc1216171 CVE-2024-7347: Fixed worker crashes on special crafted mp4 files containing invalid chunk information bsc1229155 Patch Instructions: To install this SUSE update use the SUSE recommended...
DEBIAN-CVE-2024-57184
An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gfm2tsprocesspmt in mediatools/mpegts.c:2163 that can cause a denial of service DOS via a crafted MP4 file...
PT-2026-3089
Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A heap overflow exists in the uncv parse config function. This issue can be triggered by processing a specially crafted MP4 file, potentially leading to a Denial of Service DoS. Recommendations Update to a newer...
CVE-2024-44220
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination...
CVE-2024-44220
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination...
CVE-2024-44220
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination...
CVE-2024-44220
CVE-2024-44220 affects Apple macOS (Sequoia 15.2 and Sonoma 14.7.2) where parsing a maliciously crafted video file could cause an unexpected system termination due to a memory handling issue. The vulnerability is addressed via improved memory handling in the patched releases. Connected sources (R...
FFmpeg 安全漏洞
FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n6.1.1, which stems from the presence of an integer overflow that could allow an attacker to trigger a denial of service in an application...
The vulnerability of the video file exchange function in Jitsi Meet software, which allows attackers to upload arbitrary video files.
The vulnerability of the video file exchange function in Jitsi Meet software for conducting video conferences is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to upload arbitrary video files remotely...
CVE-2024-41209
A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service DoS and Code Execution via a crafted MOV video file...
CVE-2024-41217
A heap-based buffer overflow in tsMuxer version nightly-2024-05-10-02-00-45 allows attackers to cause Denial of Service DoS via a crafted MKV video file...
CVE-2024-52613
A heap-based buffer under-read in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service DoS via a crafted MOV video file...
CVE-2024-49776
A negative-size-param in tsMuxer version nightly-2024-04-05-01-53-02 allows attackers to cause Denial of Service DoS via a crafted TS video file...
CVE-2024-41206
A stack-based buffer over-read in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Information Disclosure via a crafted TS video file...
CVE-2024-49777
A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service DoS, Information Disclosure and Code Execution via a crafted MKV video file...