CVE-2022-26428

CVE-2022-26428 describes a race condition in the MediaTek video codec that can cause memory corruption and local privilege escalation. The vulnerability is triggered without user interaction and requires local access with high privileges; the base CVSSv3.1 vector indicates Local attack, High atta...

CVE-2022-26428

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

CVE-2022-26428: Concurrent Execution using Shared Resource with Improper Synchronization

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

PT-2022-17836 · Unknown · Video Codec

Name of the Vulnerable Software and Affected Versions: Video codec affected versions not specified Description: The issue is related to a possible memory corruption due to a race condition in the video codec. This could lead to local escalation of privilege, with System execution privileges neede...

MediaTek video codec 竞争条件问题漏洞

MediaTek video codec is a video codec from MediaTek, a Chinese company. The MediaTek video codec is vulnerable to a race condition issue, which stems from a race condition that could lead to memory corruption. This could result in a local privilege escalation that requires system execution...

CVE-2022-27937

Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264...

CVE-2022-27937

Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264...

UBUNTU-CVE-2014-125007

A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intrapred of the file libavcodec/hevcpredtemplate.c. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this...

The vulnerability of the `put_weighted_bipred_16_fallback` function in the h.265 Libde265 implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putweightedbipred16fallback function in the h.265 Libde265 implementation is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created file...

CVE-2022-24451

CVE-2022-24451 affects Microsoft Windows VP9 Video Extensions. The VP9 Extensions library is vulnerable to remote code execution when processing crafted VP9 files. CVSS 3.1 vector indicates local attack with user interaction required, high impact on confidentiality/ integrity/availability. Connec...

VP9 Video Extensions Remote Code Execution Vulnerability

...

PT-2022-7268 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: Libde265 versions 1.0.8 Description: The issue is related to a heap-buffer-overflow vulnerability via the put qpel fallback function in fallback-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted video file. The...

CVE-2021-33498

Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation issue 1 of 2...

libde265 Access Control Error Vulnerability (CNVD-2022-19083)

Libde265 is a German h.265 video codec. libde265 is vulnerable to an access control error, and no detailed vulnerability details are currently available...

libde265 安全漏洞

Libde265 is a German h.265 video codec. libde265 suffers from a security vulnerability that could be exploited by an attacker to cause a denial of service DoS by running a crafted file or application with unspecified other impact...

Aom 代码问题漏洞

Aom is a next-generation open-source digital media technology for everyone organized by the Alliance For Open Media AOM. A security vulnerability exists in AOM version 2.0.1, which stems from the presence of a dereferenced NULL pointer in component av1/av1dxiface.c. The vulnerability is caused by...

libde265 Heap Buffer Overflow Vulnerability (CNVD-2021-78434)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 has a heap buffer overflow vulnerability in the putweightedbipred16fallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

libde265 Heap Buffer Overflow Vulnerability

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the putepel16fallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

libde265 Stack Buffer Overflow Vulnerability (CNVD-2021-78433)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a stack buffer overflow vulnerability in the putqpelfallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

libde265 heap buffer overflow vulnerability (CNVD-2021-78426)

libde265 is an open source implementation of the h.265 video codec. A heap buffer overflow vulnerability exists in the putepelhvfallback function in libde265 version 1.0.4. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...