Lucene search
+L

5266 matches found

OSS-Fuzz
OSS-Fuzz
•added 2018/10/19 4:47 p.m.•26 views

skia/android_codec: Heap-buffer-overflow in SkGifCodec::haveDecodedRow

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5678720501678080 Project: skia Fuzzer: libFuzzerskiaandroidcodec Fuzz target binary: androidcodec Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Addres...

6.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/10/05 12:00 a.m.•20 views

Android AMediaCodecCryptoInfo_new Code Execution

The vulnerability of the AMediaCodecCryptoInfonew function in NdkMediaCodec.cpp of the Android operating system’s framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a...

9.3CVSS6.5AI score0.01514EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2018/10/02 7:29 p.m.•27 views

CVE-2018-9491

In AMediaCodecCryptoInfonew of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in external apps with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions:...

9.3CVSS8AI score0.01514EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2018/10/02 7:29 p.m.•15 views

CVE-2018-9491

In AMediaCodecCryptoInfonew of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in external apps with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions:...

7.8CVSS6.4AI score0.01514EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2018/09/17 12:00 a.m.•32 views

Cisco TelePresence Codec Remote Detection

Detects the installed version of Cisco TelePresence Codec. This script sends an HTTP GET request and tries to ensure the presence of Cisco TelePresence Codec. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

7AI score
SaveExploits0
Prion
Prion
•added 2018/08/01 4:29 p.m.•26 views

Heap overflow

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

6.8CVSS7.3AI score0.01881EPSS
SaveExploits1References7Affected Software7
osv_cve
osv_cve
•added 2018/08/01 4:29 p.m.•35 views

CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

7.8CVSS7.2AI score0.01881EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2018/08/01 4:00 p.m.•41 views

CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

7.8CVSS7.9AI score0.01881EPSS
SaveExploits1References7
CVE
CVE
•added 2018/08/01 4:00 p.m.•147 views

CVE-2016-8654

CVE-2016-8654 is a JasPer/JPC-codec vulnerability where a heap-buffer overflow occurs due to an undersized QMFB buffer. It affects Jasper versions before 2.0.0. Remediation is to upgrade Jasper to a fixed version (≥2.0.0); various advisories (CentOS CESA-2017:1208, IBM PowerKVM bulletin, Cloud Fo...

7.8CVSS7.4AI score0.01881EPSS
SaveExploits1References7Affected Software1
Mend
Mend
•added 2018/08/01 4:00 p.m.•6 views

CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

8.5CVSS0.01881EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/01 12:00 a.m.•7 views

CVE-2016-8654: Heap-based Buffer Overflow

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

7.8CVSS7.3AI score0.01881EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2018/07/24 4:00 p.m.•37 views

CVE-2018-14589

An issue has been discovered in Bento4 1.5.1-624. AP4Mp4AudioDsiParser::ReadBits in Codecs/Ap4Mp4AudioInfo.cpp has a heap-based buffer over-read...

8.8AI score0.0148EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2018/07/23 8:29 a.m.•20 views

DEBIAN-CVE-2018-14521

An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiosourceavcodecreadframe in io/sourceavcodec.c, as demonstrated by aubiomfcc...

8.8CVSS7AI score0.01503EPSS
SaveExploits1References1
Prion
Prion
•added 2018/07/20 1:29 p.m.•29 views

Null pointer dereference

Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav...

4.3CVSS6.4AI score0.01175EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2018/07/20 1:29 p.m.•16 views

CVE-2018-14448

Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav...

6.5CVSS5.8AI score0.01175EPSS
SaveExploits1References2
NVD
NVD
•added 2018/07/20 1:29 p.m.•32 views

CVE-2018-14448

Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav...

6.5CVSS6.4AI score0.01175EPSS
SaveExploits1References2
CVE
CVE
•added 2018/07/20 1:00 p.m.•56 views

CVE-2018-14448

CVE-2018-14448 concerns the Untrunc project: a NULL pointer dereference in Codec::parse (track.cpp) when parsing a crafted MP4 file, caused by improper interaction with libav. This vulnerability affects Untrunc up to 2018-06-07 by design of the parser, and the issue is triggered during MP4 proces...

6.5CVSS6.4AI score0.01175EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2018/07/20 1:00 p.m.•6 views

CVE-2018-14448

Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav...

7.1CVSS0.01175EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2018/07/20 1:00 p.m.•38 views

CVE-2018-14448

Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav...

6.4AI score0.01175EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/20 12:00 a.m.•8 views

CVE-2018-14448: NULL Pointer Dereference

Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav...

6.5CVSS6.4AI score0.01175EPSS
SaveExploits1References2
Rows per page
Query Builder