CVE-2023-44429

GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may...

UBUNTU-CVE-2023-44429

GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may...

GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of AV1...

Security update for vlc (moderate)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2023:0365-1 Rating: moderate References: Cross-References: CVE-2022-37434 CVE-2023-5217 CVSS scores: CVE-2022-37434 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-37434 SUSE: 8.1...

dav1d: Denial of Service

Background dav1d is an AV1 decoder. Description In some circumstances, dav1d might treat an invalid frame as valid, resulting in a crash. Impact Malformed frame data can result in a denial of service. Workaround Users should avoid parsing untrusted video with dav1d. Resolution All dav1d users...

The vulnerability of the av1/av1_dx_iface.c component in the library that implements the AV1 codec of the Debian GNU/Linux operating system allows a perpetrator to trigger a service failure.

The vulnerability of the av1/av1dxiface.c component in the library that implements the AV1 codec in the Debian GNU/Linux operating system is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the aom_image.c component in the library, which implements the AV1 codec, in the Debian GNU/Linux operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the aomimage.c component in the library, which implements the AV1 codec, in the Debian GNU/Linux operating system is related to incorrect handling of hard links. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

[SECURITY] [DSA 5490-1] aom security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5490-1 [email protected] https://www.debian.org/security/ Markus Koschany September 06, 2023 https://www.debian.org/security/faq -...

CVE-2023-39616

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

CVE-2023-39616

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

CVE-2023-39616

CVE-2023-39616 affects AOMedia video codecs from v3.0.0 to v3.5.0. The issue is an invalid read memory access in the assign_frame_buffer_p component of av1/common/av1_common_int.h. Public references in the provided documents consistently describe this memory-access flaw and attribute high impact ...

[SECURITY] Fedora 37 Update: dav1d-1.2.1-1.fc37

dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness...

Fedora: Security Advisory for dav1d (FEDORA-2023-9ea5d6e289)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: dav1d-1.2.1-1.fc38

dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness...

CVE-2023-29341

AV1 Video Extension Remote Code Execution Vulnerability...

CVE-2023-29341

AV1 Video Extension Remote Code Execution Vulnerability...

CVE-2023-29340

AV1 Video Extension Remote Code Execution Vulnerability...

Remote code execution

AV1 Video Extension Remote Code Execution Vulnerability...

Remote code execution

AV1 Video Extension Remote Code Execution Vulnerability...

CVE-2023-29341 AV1 Video Extension Remote Code Execution Vulnerability

...