Lucene search
K

290 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/07 12:0 a.m.3 views

The vulnerability of the aom_dsp/grain_table.c component in the library, which implements the AV1 codec of the Debian GNU/Linux operating system, allows a perpetrator to execute arbitrary code.

The vulnerability of the aomdsp/graintable.c component in the library, which implements the AV1 codec, in the Debian GNU/Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS8.1AI score0.01885EPSS
Exploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.3 views

The vulnerability of the mc_chroma function (motion.cc) in the h.265 Libde265 video codec implementation, which allows a hacker to cause a service failure.

The vulnerability of the mcchroma function in the h.265 Libde265 video codec implementation is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to cause service failure by using a specially created file...

7.8CVSS6.5AI score0.00774EPSS
Exploits5References8Affected Software4
CNNVD
CNNVD
added 2023/03/03 12:0 a.m.2 views

Libde265 安全漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version 1.0.9, which stems from a buffer overflow issue...

7.8CVSS7.5AI score0.00312EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:52 a.m.1 views

SUSE CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec related to decompression. Successful exploitation could lead to arbitrary code execution...

8.8CVSS9AI score0.08698EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:38 a.m.3 views

SUSE CVE-2017-15672

The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read...

8.8CVSS9.7AI score0.02EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:30 a.m.2 views

SUSE CVE-2018-6912

The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

6.5CVSS9AI score0.01494EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/01/25 12:0 a.m.18 views

Debian: Security Advisory (DLA-3280-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7AI score0.01687EPSS
Exploits20References4
Debian
Debian
added 2023/01/24 10:20 p.m.39 views

[SECURITY] [DLA 3280-1] libde265 security update

Debian LTS Advisory DLA-3280-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost January 24, 2023 https://wiki.debian.org/LTS Package : libde265 Version : 1.0.3-1+deb10u2 CVE ID : CVE-2020-21596 CVE-2020-21597 CVE-2020-21598 CVE-2022-43235 CVE-2022-43236 CVE-2022-43237...

8.8CVSS7AI score0.01687EPSS
Exploits20
OSV
OSV
added 2022/12/14 9:15 p.m.6 views

CVE-2022-3113

An issue was discovered in the Linux kernel through 5.16-rc6. mtkvcodecfwvpuinit in drivers/media/platform/mtk-vcodec/mtkvcodecfwvpu.c lacks check of the return value of devmkzalloc and will cause the null pointer dereference...

5.5CVSS6.1AI score
Exploits0References2
OSV
OSV
added 2022/11/02 2:15 p.m.1 views

DEBIAN-CVE-2022-43241

Libde265 v1.0.8 was discovered to contain an unknown crash via ffhevcputhevcqpelv38sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

6.5CVSS6.5AI score0.00844EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/11/02 12:0 a.m.1 views

Libde265 安全漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.8, which stems from ffhevcputhevcqpelh3v3sse in sse-motion.cc contains an unknown crash that can be exploited by an attacker to cause a denial of service DoS via a crafted video file...

6.5CVSS6.7AI score0.00856EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2022/10/10 12:0 a.m.2 views

PT-2022-7253 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: Libde265 versions 1.0.8 Description: The issue is related to a heap-buffer-overflow vulnerability via the ff hevc put weighted pred avg 8 sse function in sse-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted vide...

9.8CVSS6.4AI score0.01962EPSS
Exploits46References207
ATTACKERKB
ATTACKERKB
added 2022/08/01 2:15 p.m.1 views

CVE-2022-26428

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

6.4CVSS6.1AI score0.0007EPSS
Exploits0References2
OSV
OSV
added 2022/08/01 2:15 p.m.1 views

CVE-2022-26428

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

6.4CVSS6.7AI score
Exploits0References1
NVD
NVD
added 2022/08/01 2:15 p.m.14 views

CVE-2022-26428

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

6.4CVSS0.0007EPSS
Exploits0References1
Prion
Prion
added 2022/08/01 2:15 p.m.13 views

Race condition

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

3.4CVSS6.7AI score0.0007EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/08/01 1:56 p.m.42 views

CVE-2022-26428

CVE-2022-26428 describes a race condition in the MediaTek video codec that can cause memory corruption and local privilege escalation. The vulnerability is triggered without user interaction and requires local access with high privileges; the base CVSSv3.1 vector indicates Local attack, High atta...

6.4CVSS6.7AI score0.0007EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/01 1:56 p.m.15 views

CVE-2022-26428

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

6.9AI score0.0007EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/08/01 12:0 a.m.1 views

MediaTek video codec 竞争条件问题漏洞

MediaTek video codec is a video codec from MediaTek, a Chinese company. The MediaTek video codec is vulnerable to a race condition issue, which stems from a race condition that could lead to memory corruption. This could result in a local privilege escalation that requires system execution...

6.4CVSS6.7AI score0.0007EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/08/01 12:0 a.m.3 views

PT-2022-17836 · Unknown · Video Codec

Name of the Vulnerable Software and Affected Versions: Video codec affected versions not specified Description: The issue is related to a possible memory corruption due to a race condition in the video codec. This could lead to local escalation of privilege, with System execution privileges neede...

6.4CVSS6.4AI score0.0007EPSS
Exploits0References3
Rows per page
Query Builder