OpenCV Denial of Service Vulnerability (CNVD-2018-04997)

OpenCV is an open source, cross-platform, lightweight computer vision library. A security vulnerability exists in the 'validateInputImageSize' function in the modules/imgcodecs/src/loadsave.cpp file in OpenCV version 3.4.1. A remote attacker can exploit this vulnerability to cause a denial of...

OpenCV Denial of Service Vulnerability (CNVD-2018-04995)

OpenCV is an open source, cross-platform, lightweight computer vision library. A security vulnerability exists in the 'validateInputImageSize' function in the modules/imgcodecs/src/loadsave.cpp file in OpenCV version 3.4.1. A remote attacker can exploit this vulnerability to cause a denial of...

CVE-2018-7285

A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its own registry of dynamic codecs and desired payload numbers. While an SDP negotiation may result in a codec using a different payload number, these desired ones are still stored...

Null pointer dereference

A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its own registry of dynamic codecs and desired payload numbers. While an SDP negotiation may result in a codec using a different payload number, these desired ones are still stored...

CVE-2018-7285

A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its own registry of dynamic codecs and desired payload numbers. While an SDP negotiation may result in a codec using a different payload number, these desired ones are still stored...

CVE-2018-7285

A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its own registry of dynamic codecs and desired payload numbers. While an SDP negotiation may result in a codec using a different payload number, these desired ones are still stored...

CVE-2018-7285

CVE-2018-7285 affects Asterisk 15.x up to 15.2.1. A NULL pointer dereference can occur in RTP handling: the RTP registry of dynamic codecs/payload numbers is consulted for all incoming packets, even dynamic ones, and if a payload maps to a different codec type than the RTP stream, and no stream o...

[SECURITY] Fedora 27 Update: libvpx-1.6.1-5.fc27

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applica tions with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide...

DEBIAN-CVE-2018-5269

In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast...

UBUNTU-CVE-2018-5269

In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast...

OpenCV 'cv::RBaseStream::setPos' function assertion failure vulnerability

OpenCV is an open source, cross-platform, lightweight computer vision library. A security vulnerability exists in the 'cv::RBaseStream::setPos' function in the modules/imgcodecs/src/bitstrm.cpp file in OpenCV version 3.3.1. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2017-1000450

In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

DEBIAN-CVE-2017-1000450

In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

Updated gstreamer0.10-plugins-ugly packages fix security vulnerability

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened CVE-2017-5846, CVE-2017-5847...

CVE-2017-14645: Out-of-bounds Read

A heap-based buffer over-read was discovered in AP4BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an application crash, which leads to remote denial of service...

DEBIAN-CVE-2017-12864

In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

DEBIAN-CVE-2017-12863

In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function PxMDecoder::readData has an integer overflow when calculate srcpitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

MGASA-2017-0259 Updated kernel-tmb packages fixes security and other bugs

This kernel-tmb update is based on upstream 4.9.40 and fixes at least the following security issues: Linux kernel built with the VirtIO GPU driverCONFIGDRMVIRTIOGPU support is vulnerable to a memory leakage issue. It could occur while creating a virtio gpu object in virtiogpuobjectcreate. A...

OpenCV Buffer Overflow Vulnerability

OpenCV is an open source, cross-platform, lightweight computer vision library. A buffer overflow vulnerability exists in the 'cv::RLByteStream::getBytes' function in the modules/imgcodecs/src/bitstrm.cpp file in OpenCV 3.3 and earlier versions. An attacker can exploit this vulnerability to cause ...

Privilege escalation

An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access ...