Lucene search
+L

171 matches found

OSV
OSV
added 2022/05/25 9:15 p.m.5 views

UBUNTU-CVE-2022-31620

In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan...

6.5CVSS6.6AI score0.01365EPSS
SaveExploits1References4
CVE
CVE
added 2022/05/25 8:6 p.m.83 views

CVE-2022-31620

CVE-2022-31620 affects libjpeg prior to 1.64. The issue is an assertion failure in BitStream::Get in bitstream.hpp that can cause denial of service, related to out-of-bounds array access during arithmetically coded lossless or sequential scans. No exploitation details are provided in the connecte...

6.5CVSS6.3AI score0.01365EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2022/05/25 8:6 p.m.87 views

CVE-2022-31620

In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan...

6.5CVSS6.4AI score0.01365EPSS
SaveExploits1
CNNVD
CNNVD
added 2022/05/25 12:0 a.m.7 views

libjpeg 缓冲区错误漏洞

libjpeg is a library written entirely in C that contains widely used implementations of JPEG decoding, JPEG encoding, and other JPEG functionality. libjpeg versions prior to 1.64 contain a denial-of-service vulnerability that stems from an assertion failure in BitStream in bitstream.hpp, which ca...

6.5CVSS5.6AI score0.01365EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/05/05 1:15 p.m.5 views

CVE-2022-29339

In GPAC 2.1-DEV-rev87-g053aae8-master, function BSReadByte in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2...

7.5CVSS5.9AI score0.01175EPSS
SaveExploits1References3
OSV
OSV
added 2022/05/05 1:15 p.m.4 views

DEBIAN-CVE-2022-29339

In GPAC 2.1-DEV-rev87-g053aae8-master, function BSReadByte in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2...

7.5CVSS7.6AI score0.01175EPSS
SaveExploits1References1
OSV
OSV
added 2022/05/05 1:15 p.m.16 views

UBUNTU-CVE-2022-29339

In GPAC 2.1-DEV-rev87-g053aae8-master, function BSReadByte in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2...

7.5CVSS7.1AI score0.01175EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/03/02 12:15 a.m.6 views

CVE-2021-45861

There is an Assertion num = INTBIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277...

5.5CVSS6AI score0.00671EPSS
SaveExploits1References3
CVE
CVE
added 2022/03/01 11:47 p.m.87 views

CVE-2021-45861

CVE-2021-45861 affects the tsMuxer project (git-c6a0277). The issue is an assertion failure: num

5.5CVSS5.5AI score0.00671EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.7 views

The vulnerability of the USACBitstreamReader function in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to disclose protected information.

The vulnerability of the USACBitstreamReader function in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6.8AI score0.00864EPSS
SaveExploits0References8Affected Software5
OSV
OSV
added 2021/12/03 8:15 p.m.6 views

CVE-2021-35344

tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h...

9.8CVSS7.6AI score0.01725EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/03 8:15 p.m.4 views

CVE-2021-35344

tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h...

9.8CVSS7.4AI score0.01725EPSS
SaveExploits1References3
OSV
OSV
added 2021/08/17 7:15 p.m.5 views

CVE-2021-0519

In BITSTREAMFLUSH of ih264ebitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

7.8CVSS7.5AI score0.00241EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/17 7:15 p.m.5 views

CVE-2021-0519

In BITSTREAMFLUSH of ih264ebitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

7.8CVSS7.7AI score0.00241EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/12/15 4:15 p.m.3 views

CVE-2020-0492

In BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID...

6.5CVSS6AI score0.00837EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.11 views

Security Vulnerabilities in Multiple Qualcomm Products

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and from time to time manufactured on the surface of semiconductor wafers. A security vulnerability exists in several Qualcomm products that...

10CVSS7.3AI score0.01194EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.16 views

The vulnerability of the programmable user-programmable gate array (PPVM) for Xilinx Spartan, Artix, Kintex, and Virtex programmable integrated circuits lies in the possibility of intercepting/mocking the file containing the encrypted control bitstream, allowing a hacker to gain full control over the programmable integrated circuits.

The vulnerability of the programmable user-programmable gate array PPVM for Xilinx Spartan, Artix, Kintex, and Virtex programmable logic integrated circuits lies in the ability to intercept or replace the file containing the encrypted control bitstream. Exploiting this vulnerability can allow an...

9CVSS5.5AI score
SaveExploits0References4Affected Software4
The Hacker News
The Hacker News
added 2020/04/21 9:55 a.m.108 views

Unpatchable 'Starbleed' Bug in FPGA Chips Exposes Critical Devices to Hackers

A newly discovered unpatchable hardware vulnerability in Xilinx programmable logic products could allow an attacker to break bitstream encryption, and clone intellectual property, change the functionality, and even implant hardware Trojans. The details of the attacks against Xilinx 7-Series and...

0.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2020/04/21 9:55 a.m.6 views

Unpatchable 'Starbleed' Bug in FPGA Chips Exposes Critical Devices to Hackers

A newly discovered unpatchable hardware vulnerability in Xilinx programmable logic products could allow an attacker to break bitstream encryption, and clone intellectual property, change the functionality, and even implant hardware Trojans. The details of the attacks against Xilinx 7-Series and...

5.9AI score
SaveExploits0
CNVD
CNVD
added 2020/03/25 12:0 a.m.5 views

GPAC Heap Buffer Overflow Vulnerability

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap buffer overflow vulnerability exists in BSReadByte in utils/bitstream.c in libgpac.a in versions of GPAC prior to 0.8.0. An attacker can exploit this vulnerability to cause a denial of service via a...

5.5CVSS8.1AI score0.00911EPSS
SaveExploits1References1
Rows per page
Query Builder