Libde265 security vulnerabilities

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.12, which originates from a denial of service when the allocation size exceeds the maximum supported 0x10000000000...

PT-2024-3036

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.5.0 FreeRDP versions prior to 2.11.6 Description The issue is related to an integer underflow in the nsc rle decode function of the FreeRDP client. This can be exploited by a remote attacker to execute arbitrary cod...

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Authentication Bypass

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Authentication Bypass Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: 1.999 Revision 1243 1.317 Revision 602 1.220 Revision 1250 1.220 Revision 12481249 1.220 Revision 597 1.217 Revision 1242 1.214 Revision 1023 1.19...

MGASA-2024-0119 Updated gstreamer1.0 packages fix vulnerability

Heap-based buffer overflow in the AV1 codec parser when handling certain malformed streams before GStreamer 1.22.9 It is possible for a malicious third party to trigger a crash in the application, and possibly also effect code execution through heap manipulation...

Updated gstreamer1.0 packages fix vulnerability

Heap-based buffer overflow in the AV1 codec parser when handling certain malformed streams before GStreamer 1.22.9 It is possible for a malicious third party to trigger a crash in the application, and possibly also effect code execution through heap manipulation...

SUSE CVE-2024-26722

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix deadlock in rt5645jackdetectwork There is a path in rt5645jackdetectwork, where rt5645-jdmutex is left locked forever. That may lead to deadlock when rt5645jackdetectwork is called for the second time. Found by...

oghttp-codec Envoy Proxy DoS

The vulnerability of the oghttp-codec in the implementation of the HTTP/2 protocol in the Envoy proxy is related to an error during request submission when exceeding the header size limit. This occurs due to the absence of the ENDHEADERS flag during the processing of CONTINUATION messages...

ROS-20240408-03

Vulnerability of derivatespatiallumavectorprediction function of h.265 Libde265 video codec implementation is related to with the ability to write beyond buffer boundaries in memory. Exploiting the vulnerability could allow an attacker, acting remotely, to affect the confidentiality, integrity an...

ROS-20240405-07

Vulnerability in slicesegmentheader function of Libde265 video codec implementation is related to copying the buffer without checking the input size. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a denial of service...

CVE-2024-27919

A vulnerability was found in how Envoy Proxy implements the oghttp codec. There are insufficient limitations placed on the amount of CONTINUATION frames that can be sent within a single stream. This issue could allow an unauthenticated remote attacker to send packets to vulnerable servers, which...

DEBIAN-CVE-2024-26722

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix deadlock in rt5645jackdetectwork There is a path in rt5645jackdetectwork, where rt5645-jdmutex is left locked forever. That may lead to deadlock when rt5645jackdetectwork is called for the second time. Found by...

CVE-2024-29025

A flaw was found in the io.netty:netty-codec-http package. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling issues due to the accumulation of data in the HttpPostRequestDecoder. The decoder cumulates bytes in the undecodedChunk buffer until ...

ROS-20240402-13

Vulnerability in picparameterset::dump function of h.265 Libde265 video codec implementation is related to multiple buffer overflows via numtilecolumns and numtilerow parameters. Exploitation of the of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +34801 more potentially affected by CVE-2024-29025 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.107.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.1, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.19.0, =0.29.0, =0.0.1, =0.0.14, =0.1.14 - ai.evolv:ascend-sdk 0.5.0 - ai.grakn.kgms:client 1.4.3 and more Source cves: CVE-2024-29025 Source advisory: MEND:CVE-2024-29025...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +34801 more potentially affected by CVE-2024-29025 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.107.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.1, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.19.0, =0.29.0, =0.0.1, =0.0.14, =0.1.14 - ai.evolv:ascend-sdk 0.5.0 - ai.grakn.kgms:client 1.4.3 and more Source cves: CVE-2024-29025 Source advisory: OSV:GHSA-5JPM-X58V-624V...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +34801 more potentially affected by CVE-2024-29025 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.107.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.1, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.19.0, =0.29.0, =0.0.1, =0.0.14, =0.1.14 - ai.evolv:ascend-sdk 0.5.0 - ai.grakn.kgms:client 1.4.3 and more Source cves: CVE-2024-29025 Source advisory: GHSA-5JPM-X58V-624V...

apache-commons-codec:PhoneticEngineFuzzer: Security exception in java.base/java.lang.AbstractStringBuilder.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5078600585904128 Project: apache-commons-codec Fuzzing Engine: libFuzzer Fuzz Target: PhoneticEngineFuzzer Job Type: libfuzzerasanapache-commons-codec Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CVE-2024-25988

In SAEMMDiscloseGuti of SAEMMRadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Pixel Security Breach

Google Pixel is a smartphone from Google Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the SAEMMDiscloseGuti method of the SAEMMRadioMessageCodec.c file, which may result in out-of-bounds reads...

Fedora: Security Advisory for apache-commons-codec (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...