Lucene search
K

987 matches found

BDU FSTEC
BDU FSTEC
added 2024/02/14 12:0 a.m.6 views

The vulnerability of the ff_hevc_put_hevc_epel_pixels_8_sse() function in the h.265 Libde265 implementation allows a attacker to cause a service failure.

The vulnerability of the ffhevcputhevcepelpixels8sse function in the h.265 Libde265 implementation is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created video file...

7.8CVSS7.3AI score0.00825EPSS
Exploits1References9Affected Software5
RedhatCVE
RedhatCVE
added 2024/02/13 6:10 p.m.34 views

CVE-2024-25112

A flaw was found in the Exiv2 command-line utility. The denial of service is triggered when Exiv2 is used to read the metadata of a crafted video file. An unbounded recursion can cause Exiv2 to crash by exhausting the stack...

5.5CVSS6.8AI score0.00222EPSS
Exploits0References3
Veracode
Veracode
added 2024/02/13 11:37 a.m.14 views

Denial Of Service (DoS)

ibexiv2.so is vulnerable to Denial of Service DoS. The vulnerability is due to the QuickTimeVideo::multipleEntriesDecode function, which triggers unbounded recursion when reading the metadata of a crafted video file, resulting in DoS...

5.5CVSS6.7AI score0.00222EPSS
Exploits0References3Affected Software2
Veracode
Veracode
added 2024/02/13 8:31 a.m.12 views

Out Of Bounds Read

libexiv2.so is vulnerable to45462 . The vulnerability is due to a flaw in the QuickTimeVideo::NikonTagsDecoder function when reading the metadata of a video. The vulnerability allows an attacker to trigger an out-of-bounds read by manipulating a video file...

5.5CVSS6.5AI score0.0024EPSS
Exploits0References3Affected Software2
NVD
NVD
added 2024/02/12 11:15 p.m.12 views

CVE-2024-25112

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function,...

5.5CVSS5.1AI score0.00222EPSS
Exploits0References2
OSV
OSV
added 2024/02/12 11:15 p.m.3 views

AZL-42558 CVE-2024-25112 affecting package exiv2 for versions less than 0.28.3-1

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function,...

5CVSS6AI score0.00222EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/02/12 11:15 p.m.12 views

CVE-2024-24826

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0, so Exiv2 versions before v0.28 are no...

5.5CVSS6AI score0.0024EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/02/12 10:17 p.m.26 views

CVE-2024-24826 Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0, so Exiv2 versions before v0.28 are no...

5.5CVSS5.4AI score0.0024EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2024/02/12 10:17 p.m.23 views

CVE-2024-24826

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0, so Exiv2 versions before v0.28 are no...

5.5CVSS5.1AI score0.0024EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2024/02/12 10:17 p.m.25 views

CVE-2024-24826

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0, so Exiv2 versions before v0.28 are no...

5.5CVSS5.2AI score0.0024EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/02/12 10:11 p.m.13 views

CVE-2024-25112

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function,...

5.5CVSS5.1AI score0.00222EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2024/02/12 10:11 p.m.9 views

CVE-2024-25112 Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function,...

5.5CVSS6.4AI score0.00222EPSS
Exploits0References2
OSV
OSV
added 2024/02/12 10:11 p.m.11 views

CVE-2024-25112 Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function,...

5.5CVSS5AI score0.00222EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/02/12 12:0 a.m.2 views

The vulnerability of the ff_hevc_put_hevc_qpel_h_2_v_1_sse() function in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the ffhevcputhevcqpelh2v1sse function in the h.265 Libde265 implementation is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure through the use of a specially...

7.8CVSS7.3AI score0.00844EPSS
Exploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/02/12 12:0 a.m.4 views

The vulnerability of the put_weighted_pred_avg_16_fallback() function (fallback-motion.cc) in the implementation of the h.265 Libde265 video codec allows a perpetrator to trigger a service failure.

The vulnerability of the putweightedpredavg16fallback function in the fallback-motion.cc implementation of the h.265 Libde265 codec is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to trigger a service...

7.8CVSS7AI score0.00844EPSS
Exploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/02/12 12:0 a.m.3 views

The vulnerability of the ff_hevc_put_weighted_pred_avg_8_sse() function in the h.265 Libde265 implementation allows a hacker to cause a service failure.

The vulnerability of the ffhevcputweightedpredavg8sse function in the h.265 Libde265 implementation is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures through the use of a...

7.8CVSS7.2AI score0.00856EPSS
Exploits2References10Affected Software6
RedHat Linux
RedHat Linux
added 2023/12/19 9:52 a.m.4 views

gstreamer: MXF demuxer use-after-free vulnerability

A use-after-free flaw was found in the MXF demuxer in GStreamer when handling certain MXF video files. This issue could allow a malicious third party to trigger a crash in the application and may allow code execution...

8.8CVSS5.8AI score0.01744EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2023/11/14 8:15 p.m.2 views

CVE-2023-47384

MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gfisomaddchapter at /isomedia/isomwrite.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

5.5CVSS5.9AI score0.00251EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.2 views

PT-2023-7372 · Adobe · Premiere Pro

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Pro versions 24.0 and earlier Adobe Premiere Pro versions 23.6 and earlier Description: The issue is related to an Access of Uninitialized Pointer, which could lead to disclosure of sensitive memory. An attacker could leverage...

4.9CVSS3.6AI score0.00337EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.2 views

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. GPAC suffers from a security vulnerability that stems from the presence of a memory leak vulnerability that allows an attacker to cause a denial of service DoS via a crafted MP4 file...

5.5CVSS6.5AI score0.00251EPSS
Exploits0References2
Rows per page
Query Builder