CVE-2019-12454

An issue was discovered in wcd9335codecenabledec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. It uses kstrndup instead of kmemdupnul, which allows attackers to have an unspecified impact via unknown vectors. NOTE: The vendor disputes this issues as not being a vulnerability...

CVE-2019-12454

The CVE-2019-12454 vulnerability affects the Linux kernel up to version 5.1.5 in wcd9335_codec_enable_dec (sound/soc/codecs/wcd9335.c). The issue arises because kstrndup is used instead of kmemdup_nul, which could enable an unspecified impact via unknown vectors. The vendor disputes this as a vul...

CVE-2019-12454

An issue was discovered in wcd9335codecenabledec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. It uses kstrndup instead of kmemdupnul, which allows attackers to have an unspecified impact via unknown vectors. NOTE: The vendor disputes this issues as not being a vulnerability...

PT-2019-12801 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.1.5 Description: An issue was discovered in the wcd9335 codec enable dec function in sound/soc/codecs/wcd9335.c. It uses kstrndup instead of kmemdup nul, which may allow attackers to have an unspecified impact...

Fedora Update for mediaconch FEDORA-2019-7155125125

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for libmediainfo FEDORA-2019-b7cf3236fb

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: libmediainfo-19.04-1.fc29

This package contains the shared library for MediaInfo. MediaInfo supplies technical and tag information about a video or audio file. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio:...

[SECURITY] Fedora 28 Update: libmediainfo-19.04-1.fc28

This package contains the shared library for MediaInfo. MediaInfo supplies technical and tag information about a video or audio file. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio:...

[SECURITY] Fedora 28 Update: mediaconch-18.03.2-7.fc28

MediaConch is an implementation checker, policy checker, reporter, and fixer that targets preservation-level audiovisual files specifically Matroska, Linear Pulse Code Modulation LPCM and FF Video Codec 1 FFV1. This project is maintained by MediaArea and funded by PREFORMA. This package includes...

[SECURITY] Fedora 28 Update: mediainfo-19.04-1.fc28

MediaInfo CLI Command Line Interface. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio: codec, sample rate, channels, language, bitrate... Text: language of subtitle Chapters: number of...

WS-2019-0379

Apache commons-codec before version “commons-codec-1.13-RC1” is vulnerable to information disclosure due to Improper Input validation...

Codec H.265 not working in HDX session

H.265 not getting utilized in the HDX session with the below settings: Followed the link: https://docs.citrix.com/en-us/receiver/windows/current-release/improve/h-265-video-encoding.html Studio Policy set: 1. Graphic Status indicator - Disabled 2. Moving Image Compression - Disabled 3. Optimize...

Fedora Update for libmediainfo FEDORA-2019-9d1e542c57

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Google Android Media framework APacketSource.cpp file remote code execution vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer error vulnerability exists in MakeMPG4VideoCodecSpecificData in the APacketSource.cpp file in Android. The vulnerability stems from a networked system or product performing operations in...

Heap-based Buffer Overflow

jasper is vulnerable to heap-buffer overflow vulnerability. A remote attacker could exploit the flaw by allocating inadequate sizes to the buffer, causing denial of service. The affected component is JPC Codec...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service. A lack of domain checks for the ICT/RCT in the JPC codec allows an attacker to cause an unexpected application termination through reachable assertions...

PT-2019-4897

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions through 3.0.7 Description The issue is related to a heap-based buffer over-read in the lavc CopyPicture function, located in modules/codec/avcodec/video.c, due to improper validation of the width and height...

[SECURITY] Fedora 30 Update: libmediainfo-18.12-3.fc30

This package contains the shared library for MediaInfo. MediaInfo supplies technical and tag information about a video or audio file. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio:...

Debian DSA-4405-1 : openjpeg2 - security update

Multiple vulnerabilities have been discovered in openjpeg2, the open-source JPEG 2000 codec, that could be leveraged to cause a denial of service or possibly remote code execution. - CVE-2017-17480 Write stack-based buffer overflow in the jp3d and jpwl codecs can result in a denial of service or...

PT-2019-5871

Name of the Vulnerable Software and Affected Versions WavPack versions through 5.1.0 Description The issue is related to access to an uninitialized pointer in the WavPack audio codec. It allows a remote attacker to cause a denial of service via a DFF file lacking valid sample-rate data. The...