PT-2018-12525

Name of the Vulnerable Software and Affected Versions Untrunc through 2018-06-07 Description The issue arises from a NULL pointer dereference in the Codec::parse function, located in track.cpp, due to improper interaction with libav when processing a crafted MP4 file. Recommendations For Untrunc...

Teradek Slice 7.3.15 (snapshot.cgi) Stream Disclosure

Summary Built on the award-winning Cube platform, Slice is a rack mount HEVC / H.264 codec designed to fit seamlessly into your broadcast studio. Like the Cube, Slice encoders and decoders includes 3G-SDI and HDMI I/O, Ethernet and WiFi connectivity, and full duplex IFB. Description Slice suffers...

CVE-2018-5857

In the WCD CPE codec, a Use After Free condition can occur in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

Race condition

In the WCD CPE codec, a Use After Free condition can occur in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5857

In the WCD CPE codec, a Use After Free condition can occur in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5857

In CVE-2018-5857, the issue is a Use-After-Free in the WCD CPE codec used by CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) via the Linux kernel. The root cause is a memory management defect in wcd_cpe_core that can be triggered locally. The CVSS metrics indicate a Local ...

CVE-2018-5857: Use After Free

In the WCD CPE codec, a Use After Free condition can occur in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

PT-2018-17192

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: A Use After Free condition can occur in the WCD CPE codec, affecting all Android...

Google Android Qualcomm component remote code execution vulnerability (CNVD-2018-12662)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the Google Android Qualcomm component Hardware codec. A remote attacker could exploit this vulnerability to execute code...

Google Patches 11 Critical Android Bugs in June Update

Google patched 57 vulnerabilities Monday affecting the Android operating system and kernel and chipset components tied to third-party firms MediaTek, NVIDIA and Qualcomm. Eleven of the bugs are rated critical and 46 are rated high. Google said the most severe of the vulnerabilities are remote cod...

Thinwire+ Support for H.264 Build-To-Lossless for transient content.

Introduction One of the features of Thinwire+ is “build to lossless” for transient content. This means that content such as3D or other moving imageryis initially displayed at low quality to improve frame rates and overall interactivity. Once user input has stopped, transient images are gradually...

Qualcomm Sound Codec RCE

The vulnerability of the Qualcomm Sound Codec component in the Android operating system is related to insufficient access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code using a specially crafted application...

[SECURITY] Fedora 27 Update: flac-1.3.2-7.fc27

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

Debian DSA-4197-1 : wavpack - security update

Multiple vulnerabilities were discovered in the wavpack audio codec which could result in denial of service or the execution of arbitrary code if malformed media files are processed. The oldstable distribution jessie is not affected. C Tenable Network Security, Inc. The descriptive text and packa...

[SECURITY] Fedora 28 Update: flac-1.3.2-7.fc28

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

[SECURITY] [DSA 4197-1] wavpack security updaze

------------------------------------------------------------------------- Debian Security Advisory DSA-4197-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 09, 2018 https://www.debian.org/security/faq -...

USN-3637-1: WavPack vulnerabilities

Thuan Pham, Marcel Böhme, Andrew Santosa and Alexandru Razvan Caciulescu discovered that WavPack incorrectly handled certain .wav files. An attacker could possibly use this to execute arbitrary code or cause a denial of service. CVE-2018-10536, CVE-2018-10537 Thuan Pham, Marcel Böhme, Andrew...

DEBIAN-CVE-2017-6888

An error in the "readmetadatavorbiscomment" function src/libFLAC/streamdecoder.c in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file...

Denial Of Service (DoS) Through Stack Buffer Overflow

libtiff.so is vulnerable to denial of service DoS through stack-based buffer overflow. The vulnerability exists in the TIFFGetField function where a stack-based buffer overflow can occur, when parsing a tiff file, depending on whether a codec was enabled...

Google Android Media framework(libavc) security vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with the Media framework libavc as a framework for multimedia development. is a framework used for multimedia...