164 matches found
OSV-2025-614 Heap-buffer-overflow in hevc_hvcC_to_AnnexB_NAL
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437694936 Crash type: Heap-buffer-overflow WRITE Crash state: hevchvcCtoAnnexBNAL Open genericstart...
gstreamer1-plugins-bad-free: mingw-gstreamer1-plugins-bad-free: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
A flaw was found in GStreamer H265 Codec Parsing gstreamer1-plugins-bad-free. This vulnerability allows remote attackers to execute arbitrary code by parsing H265 slice headers...
gstreamer1-plugins-bad-free: mingw-gstreamer1-plugins-bad-free: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
A flaw was found in GStreamer H265 Codec Parsing gstreamer1-plugins-bad-free. This vulnerability allows remote attackers to execute arbitrary code by parsing H265 slice headers...
GStreamer 安全漏洞
GStreamer is a GStreamer open source set of frameworks for processing streaming media. A security vulnerability exists in GStreamer that stems from not properly validating the data length when parsing H265 slice headers, which could lead to remote code execution...
The vulnerability of the gf_hevc_read_sps_bs_internal function in the av_parsers.c file of the MP4Box packaging tool for the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the gfhevcreadspsbsinternal function in the avparsers.c file of the MP4Box package of the GPAC multimedia platform is related to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure during...
SUSE CVE-2025-27091
OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence...
DEBIAN-CVE-2025-27091
OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence...
media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
...
UBUNTU-CVE-2024-35921
In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed i...
The vulnerability of the `pic_parameter_set::dump()` function in the h.265 Libde265 implementation allows a attacker to disclose protected information or cause service failures.
The vulnerability of the picparameterset::dump function in the h.265 Libde265 implementation is related to buffer overflows caused by the parameters numtilecolumns and numtilerow. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service failures...
The vulnerability of the read_coding_unit function (slice.cc) in the h.265 Libde265 video codec implementation, which allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the readcodingunit function slice.cc in the h.265 Libde265 video codec implementation is related to the output of operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to influence the confidentiality, integrity, and...
The vulnerability of the put_weighted_pred_avg_16_fallback() function (fallback-motion.cc) in the implementation of the h.265 Libde265 video codec allows a perpetrator to trigger a service failure.
The vulnerability of the putweightedpredavg16fallback function in the fallback-motion.cc implementation of the h.265 Libde265 codec is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to trigger a service...
PT-2023-7232 · Gstreamer +6 · Gstreamer +6
Name of the Vulnerable Software and Affected Versions: GStreamer affected versions not specified Description: The issue is related to a heap-based buffer overflow in the AV1 Codec parsing of the GStreamer multimedia framework. This allows remote attackers to execute arbitrary code on affected...
The vulnerability of the Gstreamer multimedia framework, related to buffer overflow in the stack, allows an attacker to execute arbitrary code.
The vulnerability of the Gstreamer multimedia framework is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted H265 encoding files...
FreeRDP 资源管理错误漏洞
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a resource management error vulnerability that stems from a post-release reuse issue in the avc420ensurebuffer and avc444ensurebuffer functions...
The vulnerability of the `derive_collocated_motion_vectors` function in the h.265 Libde265 codec implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the derivecollocatedmotionvectors function in the h.265 Libde265 implementation is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
UBUNTU-CVE-2023-24752
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ffhevcputhevcepelpixels8sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input file...
SUSE CVE-2017-3068
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful exploitation could lead to arbitrary code execution...
GPAC MP4Box 安全漏洞
GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev617-g85ce76efd, which stems from a...
DEBIAN-CVE-2022-43238
Libde265 v1.0.8 was discovered to contain an unknown crash via ffhevcputhevcqpelh3v3sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...