CVE-2020-0499

In FLACbitreaderreadricesignedblock of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

OSV-2020-1155 Heap-buffer-overflow in FLAC__bitreader_read_rice_signed_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17069 Crash type: Heap-buffer-overflow READ 4 Crash state: FLACbitreaderreadricesignedblock readresidualpartitionedrice readsubframelpc...

OSV-2020-174 Heap-buffer-overflow in int arrow::BitUtil::BitReader::GetBatch<short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21166 Crash type: Heap-buffer-overflow WRITE 8 Crash state: int arrow::BitUtil::BitReader::GetBatch int arrow::util::RleDecoder::GetBatch parquet::internal::TypedRecordReaderparquet::PhysicalType...

OSV-2020-144 Heap-use-after-free in int arrow::BitUtil::BitReader::GetBatch<short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20685 Crash type: Heap-use-after-free WRITE 2 Crash state: int arrow::BitUtil::BitReader::GetBatch parquet::LevelDecoder::Decode parquet::internal::TypedRecordReaderparquet::PhysicalType...

OSV-2020-21 UNKNOWN WRITE in arrow::internal::unpack32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20711 Crash type: UNKNOWN WRITE Crash state: arrow::internal::unpack32 int arrow::BitUtil::BitReader::GetBatch parquet::DictByteArrayDecoderImpl::DecodeArrowDense...

Bento4 Buffer Overflow Vulnerability (CNVD-2019-28471)

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4BitReader::SkipBits' function in the Core/Ap4Utils.cpp file in Bento4 version 1.5.1.0, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

CVE-2019-15047

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the function AP4BitReader::SkipBits at Core/Ap4Utils.cpp...

CVE-2019-15047

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the function AP4BitReader::SkipBits at Core/Ap4Utils.cpp...