The vulnerability of the Gstreamer multimedia framework, related to buffer overflow in the stack, allows an attacker to execute arbitrary code.

The vulnerability of the Gstreamer multimedia framework is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted H265 encoding files...

FreeRDP 资源管理错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a resource management error vulnerability that stems from a post-release reuse issue in the avc420ensurebuffer and avc444ensurebuffer functions...

The vulnerability of the `derive_collocated_motion_vectors` function in the h.265 Libde265 codec implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the derivecollocatedmotionvectors function in the h.265 Libde265 implementation is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

UBUNTU-CVE-2023-24752

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ffhevcputhevcepelpixels8sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input file...

SUSE CVE-2017-3068

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful exploitation could lead to arbitrary code execution...

GPAC MP4Box 安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev617-g85ce76efd, which stems from a...

DEBIAN-CVE-2022-43238

Libde265 v1.0.8 was discovered to contain an unknown crash via ffhevcputhevcqpelh3v3sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox due to an out-of-bounds read when using H264 decoding...

Mozilla: Out of bounds read when decoding H264

The Mozilla Foundation Security Advisory describes this flaw as: An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash...

Mozilla: Out of bounds read when decoding H264

The Mozilla Foundation Security Advisory describes this flaw as: An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash...

Mozilla: Out of bounds read when decoding H264

The Mozilla Foundation Security Advisory describes this flaw as: An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash...

PKUVCL davs2 安全漏洞

davs2 is an open source decoder for AVS2-P2/IEEE1857.4 video coding standard open source by PKUVCL in China. A security vulnerability exists in PKUVCL davs2 v1.6.205, which stems from a global buffer overflow in the parsesequenceheader function in its source/common/header.cc:269 component...

The vulnerability of HEVC Video Extensions relates to insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2022-29119

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2022-29111

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2022-22018

HEVC Video Extensions Remote Code Execution Vulnerability...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC 2.0.0, which stems from the fact that gprtpbuilderdohevc in ietf/rtppckmpeg4.c has a heap-based buffer over-read, as shown in MP4Box...

Microsoft Windows Codecs Library 输入验证错误漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions, which can be exploited by an...

The vulnerability of the decode_CABAC_bit function in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the decodeCABACbit function in the h.265 Libde265 video codec implementation is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

The vulnerability of the ff_hevc_put_unweighted_pred_8_sse function in the h.265 Libde265 implementation allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ffhevcputunweightedpred8sse function in the H.265 Libde265 video codec implementation is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause servi...