Lucene search
+L

3380 matches found

CNNVD
CNNVD
added 2021/09/20 12:00 a.m.8 views

Sela 代码问题漏洞

SELA is a lossless audio codec. lpc::SampleGenerator::process function in samplegenerator.cpp in SELA 20200412 and earlier versions is vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS5.8AI score0.00635EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/09/20 12:00 a.m.8 views

Sela 缓冲区错误漏洞

Sela is a lossless audio codec. A security vulnerability exists in sela, which stems from a heap-based buffer overflow in file::WavFile::writeToFile in wav file.c. The vulnerability is caused by a heap-based buffer overflow in file::WavFile::writeToFile...

7.8CVSS7.6AI score0.00764EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/09/20 12:00 a.m.11 views

Faad2 缓冲区错误漏洞

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a stack buffer overflow vulnerability exists in the ftypin function in mp4read.c in FAAD2 2.10.0 and earlier versions. An attacker could exploit this vulnerability to execute...

7.8CVSS7.8AI score0.01129EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2021/09/20 12:00 a.m.9 views

Sela 缓冲区错误漏洞

SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...

7.8CVSS7.7AI score0.00764EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/09/17 12:00 a.m.52 views

libde265 Heap Buffer Overflow Vulnerability (CNVD-2021-78434)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 has a heap buffer overflow vulnerability in the putweightedbipred16fallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

6.5CVSS4.8AI score0.01438EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/17 12:00 a.m.67 views

libde265 Stack Buffer Overflow Vulnerability (CNVD-2021-78433)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a stack buffer overflow vulnerability in the putqpelfallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

6.5CVSS5.9AI score0.01096EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/17 12:00 a.m.49 views

libde265 Heap Buffer Overflow Vulnerability (CNVD-2021-78432)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the putweightedpredavg16fallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

6.5CVSS4.8AI score0.01438EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/17 12:00 a.m.27 views

libde265 heap buffer overflow vulnerability (CNVD-2021-78426)

libde265 is an open source implementation of the h.265 video codec. A heap buffer overflow vulnerability exists in the putepelhvfallback function in libde265 version 1.0.4. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

6.5CVSS7.2AI score0.0122EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/17 12:00 a.m.51 views

libde265 Heap Buffer Overflow Vulnerability

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the putepel16fallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

4.3CVSS4.8AI score0.01096EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2021/09/17 12:00 a.m.44 views

libde265 Heap Buffer Overflow Vulnerability (CNVD-2021-78429)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the mcchroma function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...

6.5CVSS4.8AI score0.01547EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/17 12:00 a.m.37 views

libde265 Heap Buffer Overflow Vulnerability (CNVD-2021-78431)

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the de265image::availablezscan function. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

6.5CVSS4.8AI score0.01438EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/17 12:00 a.m.51 views

libde265 Global Buffer Overflow Vulnerability

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a global buffer overflow vulnerability in the decodeCABACbit function. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

4.3CVSS5.6AI score0.01492EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
added 2021/09/16 12:00 a.m.10 views

Libde265 缓冲区错误漏洞

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a global buffer overflow vulnerability in the decodeCABACbit function. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

6.5CVSS7AI score0.01492EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2021/09/14 3:09 p.m.57 views

CVE-2021-37137

A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...

7.5CVSS3.6AI score0.06745EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2021/09/14 3:09 p.m.78 views

CVE-2021-37136

A flaw was found in Netty's netty-codec due to size restrictions for decompressed data in the Bzip2Decoder. By sending a specially-crafted input, a remote attacker could cause a denial of service...

7.5CVSS3.7AI score0.05908EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/11 3:03 a.m.13 views

Security Bulletin: Input Validation Vulnerability in Apache Commons Codec Affects IBM Sterling Connect:Direct for UNIX

Summary An Apache Commons Codec vulnerability for validating input was addressed by IBM Sterling Connect:Direct for UNIX. Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commons Codec could allow a remote attacker to obtain sensitive information, caused by the improper...

1AI score
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2021/09/11 12:00 a.m.25 views

Python < 3.6.13, 3.7.x < 3.7.10, 3.8.x < 3.8.7, 3.9.x < 3.9.1 Python Issue (bpo-41944) - Linux

Python is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

9.8CVSS10AI score0.08334EPSS
SaveExploits0References2
Veracode
Veracode
added 2021/09/10 6:32 a.m.48 views

Denial Of Service(DoS)

netty-codec is vulnerable to denial of service. The vulnerability exists due to lack of allocation size restriction on the decompressed output data in the Snappy frame decoder function, leading to an OOME...

7.5CVSS2.9AI score0.05908EPSS
SaveExploits0References20Affected Software28
Veracode
Veracode
added 2021/09/10 6:15 a.m.42 views

Denial Of Service(DoS)

netty-codec is vulnerable to denial of service. The vulnerability exists due to lack of allocation size restriction on the decompressed output data in the Bzip2 decompression decoder function, leading to an OOME...

7.5CVSS3.4AI score0.06745EPSS
SaveExploits0References21Affected Software28
vulnersOsv
vulnersOsv
added 2021/08/25 8:52 p.m.3 views

av-codec (>=0.1.0, <=0.2.1), av-format (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2021-25904 via av-data (>=0.1.0, <=0.2.2)

av-data CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - libaom 0.2.0 - libvpx 0.1.0 Source cves: CVE-2021-25904 Source advisory: OSV:GHSA-352P-RHVQ-7G78...

7.5CVSS7.4AI score0.01327EPSS
SaveExploits1
Rows per page
Query Builder