ffmpeg:ffmpeg_AV_CODEC_ID_VP6F_fuzzer: Use-of-uninitialized-value in ff_vp3dsp_h_loop_filter_12

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4610946029387776 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVP6Ffuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

MS10-055: Vulnerability in Cinepak codec could allow remote code execution

MS10-055: Vulnerability in Cinepak codec could allow remote code execution Applies To Windows 7 Enterprise Windows 7 Home Basic Windows 7 Home Premium Windows 7 Professional Windows 7 Ultimate Windows Vista Service Pack 2 Windows Vista Business Windows Vista Enterprise Windows Vista Home Basic...

MS10-062: Vulnerability in MPEG-4 Codec could allow remote code execution

MS10-062: Vulnerability in MPEG-4 Codec could allow remote code execution Applies To Windows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows Server 2008 Datacenter Windows Server 2008...

MS10-026: Vulnerability in Microsoft MPEG Layer-3 codec could allow remote code execution

MS10-026: Vulnerability in Microsoft MPEG Layer-3 codec could allow remote code execution Applies To Windows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows Server 2008 Datacenter Windows...

MS10-052 Vulnerability in Microsoft MPEG Layer-3 codecs could allow remote code execution

MS10-052 Vulnerability in Microsoft MPEG Layer-3 codecs could allow remote code execution Applies To Microsoft Windows Server 2003 Service Pack 2 Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Service Pack 3 Microsoft Windows XP Home Edition Microsoft Windows XP Professional...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1IMAGE_fuzzer: Use-of-uninitialized-value in ff_vc1_pred_mv

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5539349918187520 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1IMAGEfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

ffmpeg:ffmpeg_AV_CODEC_ID_SHORTEN_fuzzer: Use-of-uninitialized-value in get_ur_golomb_jpegls

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5533480570650624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSHORTENfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_RV40_fuzzer: Use-of-uninitialized-value in ff_er_frame_end

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4615653984632832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDRV40fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_APAC_fuzzer: Use-of-uninitialized-value in get_code

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5758325067677696 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAPACfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_MVHA_fuzzer: Use-of-uninitialized-value in add_left_pred_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4878509466517504 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMVHAfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

UBUNTU-CVE-2024-42228

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value size when calling amdgpuvcecsreloc Initialize the size before calling amdgpuvcecsreloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate...

CVE-2024-42088

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Add platform entry for ETDM1OUTBE dai link Commit e70b8dd26711 "ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link" removed the codec entry for the ETDM1OUTBE dai link entirely instead ...

ffmpeg:ffmpeg_AV_CODEC_ID_SNOW_fuzzer: Heap-buffer-overflow in encode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5703668010647552 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSNOWfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6090000002...

apache-commons-codec:PhoneticEngineFuzzer: Security exception in java.base/java.util.HashMap.resize

Detailed Report: https://oss-fuzz.com/testcase?key=5069747052412928 Project: apache-commons-codec Fuzzing Engine: libFuzzer Fuzz Target: PhoneticEngineFuzzer Job Type: libfuzzerasanapache-commons-codec Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

netty-codec-http: Allocation of Resources Without Limits or Throttling

A flaw was found in the io.netty:netty-codec-http package. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling issues due to the accumulation of data in the HttpPostRequestDecoder. The decoder cumulates bytes in the undecodedChunk buffer until ...

PT-2024-40824 · Flac · Flac

Name of the Vulnerable Software and Affected Versions: FLAC affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the FLAC replaygain synthesis apply gain function, which is called from the write callback and...

kernel: Bluetooth: hci_codec: Fix leaking content of local_codecs

A memory leak flaw was found in the Linux kernel’s Bluetooth functionality. This flaw allows a local user to crash the system...

[SECURITY] Fedora 40 Update: ffmpeg-6.1.1-19.fc40

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

CLSA-2024-1721401573 Fix CVE(s): CVE-2020-27619

SECURITY UPDATE: eval on content received via HTTP in test suite - debian/patches/CVE-2020-27619.patch: No longer call eval on content received via HTTP in the CJK codec tests - CVE-2020-27619...

CLSA-2024-1721401321 Fix CVE(s): CVE-2020-27619

SECURITY UPDATE: eval on content received via HTTP in test suite - debian/patches/CVE-2020-27619.patch: No longer call eval on content received via HTTP in the CJK codec tests - CVE-2020-27619...