Out-of-bounds

In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

CVE-2022-47340

The CVE-2022-47340 entry describes a vulnerability in UNISOC h265 codec firmware where a missing bounds check allows an out-of-bounds write, causing local denial of service. Affected component: UNISOC h265 codec firmware in UNISOC chipsets; root cause: lack of boundary checking leading to out-of-...

CVE-2022-47340

In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

CVE-2022-47340

In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

CVE-2022-47340: Out-of-bounds Write

In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

PT-2025-26051 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak issue has been identified in the Linux kernel, specifically in the ASoC: cros ec codec component. The problem arises from the of parse phandle function, which returns a...

PT-2023-15258

Name of the Vulnerable Software and Affected Versions h265 codec firmware affected versions not specified Description The issue is related to a missing bounds check in the h265 codec firmware, which could lead to an out of bounds write. This might result in a local denial of service with no...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEGLS_fuzzer: Heap-buffer-overflow in mjpeg_decode_scan

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5122999065116672 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDJPEGLSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEG2VIDEO_fuzzer: Heap-buffer-overflow in ff_add_pixels_clamped_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4526419991724032 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMPEG2VIDEOfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 8 (RHSA-2023:1513)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1513 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 7 (RHSA-2023:1512)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1512 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 9 (RHSA-2023:1514)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1514 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 7 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Libde265 Slice Component DoS

The vulnerability of the slice.cc component in the h.265 Libde265 video codec implementation is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

sps.cc Component Libde265 Data Compromise

The vulnerability of the sps.cc component in the h.265 video codec implementation by Libde265 is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service failures...

Libde265 derive_boundaryStrength Buffer Overflow DoS

The vulnerability of the deriveboundaryStrength function in the deblock.cc component of the h.265 Libde265 video codec implementation is related to errors during resource release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Libde265 put_epel_hv_fallback DoS

The vulnerability of the putepelhvfallback function in the fallback-motion.cc component of the h.265 Libde265 codec implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service failures...

CVE-2023-21000

In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-194783918...

Out-of-bounds

In A2DPBuildCodecHeaderSbc of a2dpsbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...