68 matches found
Astra Linux – Vulnerability in aom
aomimage.c in libaom in AOMedia before 2021-04-07 releases memory that is not located in the heap...
Astra Linux – vulnerability in aom
The aomdsp/noisemodel.c file in libaom within AOMedia prior to 2021-03-24 contains a buffer overflow...
gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tile_list_obu parser byte/bit confusion
A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad. The gstav1parserparsetilelistobu function passes a byte count to a bit-reader API that expects a bit count, causing parser desynchronization. A remote attacker could trick a user into opening a special...
EUVD-2026-38046
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...
CVE-2026-56210
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...
EUVD-2026-38045
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing LAP mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when glaginframes is set to 1 or higher. This results in a 232-byte...
AOMedia libaom buffer error vulnerability
The AOMedia libaom vulnerability involves a buffer overflow issue, stemming from a heap buffer overflow in libaom. In the AV1 encoder’s Look-Ahead Processing LAP mode, when glaginframes is set to 1 or higher, the first-pass statistical loop bypasses the buffer protection around the loop. This...
AOMedia libaom buffer error vulnerability
The AOMedia libaom vulnerability involves a buffer overflow issue. This vulnerability stems from the lack of boundary checks in the SVC Scalable Video Coding layer ID control function. It allows for the setting of a spatiallayerid that exceeds the configured number of layers. This leads to...
AOMedia libaom buffer error vulnerability
AOMedia libaom has a security vulnerability. This vulnerability stems from the lack of boundary checks in the SVC layer ID control function. It allows attackers to inject arbitrary pointers into the loop refresh mapping field through carefully designed image pixel values, potentially leading to...
AOMedia libaom buffer error vulnerability
The AOMedia libaom vulnerability involves a buffer overflow issue. This vulnerability stems from insufficient boundary validation in the SVC layer ID control of the AV1 encoder. It allows attackers to overlap custom video frame pixels with the internal encoder layer’s context structure, thereby...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, caused by an error in calculating the buffer size for AV1 block information. This vulnerability may lead to the...
UBUNTU-CVE-2026-30997
An out-of-bounds read in the readglobalparam function libavcodec/av1dec.c of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
EUVD-2023-43325
Malicious code in bioql PyPI...
USN-7397-1 aom vulnerability
Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...
libaom security breach
libaom is a software application. A reference codec for the AOMedia Video 1 format. A security vulnerability exists in libaom that stems from an integer overflow in the imgallochelper function of the libaom library...
AOMedia Buffer Error Vulnerability
AOMedia is a next-generation open source digital media technology for everyone from the AOMedia organization. AOMedia versions prior to v3.7.1 suffer from a buffer error vulnerability that stems from the fact that increasing the resolution of a video frame while performing multi-threaded encoding...
aom_dsp/noise_model.c AV1 Code Execution
The vulnerability of the aomdsp/noisemodel.c component in the library that implements the AV1 codec in the Debian GNU/Linux operating system is caused by buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
CVE-2023-39616
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...
