PT-2022-21659

Name of the Vulnerable Software and Affected Versions LibreDWG version 0.12.4.4608 Description A stack overflow issue was discovered in the function copy bytes at decode r2007.c, which can be exploited. Recommendations For LibreDWG version 0.12.4.4608, consider disabling the copy bytes function i...

PT-2022-21657 · Libredwg · Libredwg

Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.4.4608 Description: The issue is related to a heap-buffer-overflow in the decode preR13 section hdr function located at decode r11.c. This overflow can potentially lead to memory corruption and execution of arbitrary cod...

CLSA-2022-1655822512 Fixed 6 CVEs in kernel

net: qrtr: fix another OOB Read in qrtrendpointpost CVE-2021-3743 - vt: keyboard: avoid signed integer overflow in kascii CVE-2020-13974 - pNFS/flexfiles: fix incorrect size check in decodenfsfh CVE-2021-4157 - esp: Fix possible buffer overflow in ESP transformation CVE-2022-27666 - sock: remove...

libvips:sharpen_fuzzer: Segv on unknown address in jxl::N_AVX2::XYBStage<jxl::N_AVX2::PerChannelOp<jxl::N_AVX2::Op709> >::ProcessRo

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6150953935437824 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: sharpenfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash Stat...

UBUNTU-CVE-2014-125019

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodenalunit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix thi...

UBUNTU-CVE-2014-125022

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shortendecodeframe of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this...

UBUNTU-CVE-2014-125020

A vulnerability has been found in FFmpeg 2.0 and classified as critical. This vulnerability affects the function decodeupdatethreadcontext. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue...

UBUNTU-CVE-2014-125024

A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lagdecodeframe. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue...

UBUNTU-CVE-2014-125025

A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decodepulses. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue...

PT-2022-7780

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A critical issue has been found in the function decode update thread context, leading to memory corruption. The attack can be initiated remotely. Recommendations For FFmpeg version 2.0, apply a patch to fix this...

PT-2022-7784

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A critical issue has been found, affecting the function lag decode frame. This issue leads to memory corruption and can be exploited remotely. Recommendations For FFmpeg version 2.0, it is recommended to apply a...

PT-2022-7785

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A problematic vulnerability has been found in FFmpeg, affecting the decode pulses function. This issue leads to memory corruption and can be initiated remotely. Recommendations For FFmpeg version 2.0, it is...

PT-2022-7779

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A vulnerability was found in the function decode nal unit of the component Slice Segment Handler, leading to memory corruption. The manipulation can be initiated remotely. Recommendations For FFmpeg version 2.0, ...

PT-2022-7778

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A problematic issue has been found in the function decode slice header, leading to memory corruption. The attack may be launched remotely. Recommendations For FFmpeg version 2.0, it is recommended to apply a patc...

FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the Ffmpeg team. FFmpeg truemotion1decodeheader suffers from a denial-of-service vulnerability that can be exploited by attackers to cause a denial-of-service attack...

FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg decodesliceheader function, which can be exploited by an attacker to cause a denial of service attack...

PT-2022-7782

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A vulnerability was found in the function shorten decode frame of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. Recommendations For...

FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A code execution vulnerability exists in the FFmpeg lagdecodeframe function, which could be exploited by attackers to execute arbitrary code on the system...

UBUNTU-CVE-2014-125004

A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function decodehextile of the file libavcodec/vmnc.c. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue...

UBUNTU-CVE-2014-125017

A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpzadecodestream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix thi...