171 matches found
UBUNTU-CVE-2023-24752
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ffhevcputhevcepelpixels8sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input file...
SUSE CVE-2017-3068
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful exploitation could lead to arbitrary code execution...
GPAC MP4Box security vulnerability
GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev617-g85ce76efd, which stems from a...
DEBIAN-CVE-2022-43238
Libde265 v1.0.8 was discovered to contain an unknown crash via ffhevcputhevcqpelh3v3sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...
Mozilla Firefox buffer error vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox due to an out-of-bounds read when using H264 decoding...
Mozilla: Out of bounds read when decoding H264
The Mozilla Foundation Security Advisory describes this flaw as: An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash...
Mozilla: Out of bounds read when decoding H264
The Mozilla Foundation Security Advisory describes this flaw as: An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash...
Mozilla: Out of bounds read when decoding H264
The Mozilla Foundation Security Advisory describes this flaw as: An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash...
PKUVCL davs2 security vulnerabilities
davs2 is an open source decoder for AVS2-P2/IEEE1857.4 video coding standard open source by PKUVCL in China. A security vulnerability exists in PKUVCL davs2 v1.6.205, which stems from a global buffer overflow in the parsesequenceheader function in its source/common/header.cc:269 component...
HEVC Video Extensions Code Execution
The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...
CVE-2022-29119
HEVC Video Extensions Remote Code Execution Vulnerability...
CVE-2022-29111
HEVC Video Extensions Remote Code Execution Vulnerability...
CVE-2022-22018
HEVC Video Extensions Remote Code Execution Vulnerability...
GPAC buffer error vulnerability
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC 2.0.0, which stems from the fact that gprtpbuilderdohevc in ietf/rtppckmpeg4.c has a heap-based buffer over-read, as shown in MP4Box...
Microsoft Windows Codecs Library input validation error vulnerability
Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions, which can be exploited by an...
Libde265 Heap Buffer Overflow DoS
The vulnerability of the decodeCABACbit function in the h.265 Libde265 video codec implementation is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...
Libde265 ff_hevc_put_unweighted_pred_8_sse Heap Buffer Overflow DoS
The vulnerability of the ffhevcputunweightedpred8sse function in the H.265 Libde265 video codec implementation is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause servi...
HEVC Video Extension Code Execution
The vulnerability of the HEVC Video Extension is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...
HEVC Video Extension Code Execution
The vulnerability of the HEVC Video Extension codec is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...