UBUNTU-CVE-2022-34300

In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData...

PT-2022-5384

Name of the Vulnerable Software and Affected Versions TorchVision affected versions not specified Description The issue is related to the decode png function in TorchVision, a computer vision system, which is vulnerable to a buffer overflow when processing PNG files. This could allow an attacker ...

CVE-2022-33024

There is an Assertion int decodepreR13entitiesBITCODERL, BITCODERL, unsigned int, BITCODERL, BITCODERL, BitChain , DwgData ' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608...

PT-2022-21657 · Libredwg · Libredwg

Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.4.4608 Description: The issue is related to a heap-buffer-overflow in the decode preR13 section hdr function located at decode r11.c. This overflow can potentially lead to memory corruption and execution of arbitrary cod...

PT-2022-21653

Name of the Vulnerable Software and Affected Versions LibreDWG version 0.12.4.4608 Description A heap-use-after-free issue was discovered in the function decode preR13 section at decode r11.c. Recommendations For LibreDWG version 0.12.4.4608, consider disabling the decode preR13 section function ...

PT-2022-21659

Name of the Vulnerable Software and Affected Versions LibreDWG version 0.12.4.4608 Description A stack overflow issue was discovered in the function copy bytes at decode r2007.c, which can be exploited. Recommendations For LibreDWG version 0.12.4.4608, consider disabling the copy bytes function i...

CLSA-2022-1655822512 Fixed 6 CVEs in kernel

net: qrtr: fix another OOB Read in qrtrendpointpost CVE-2021-3743 - vt: keyboard: avoid signed integer overflow in kascii CVE-2020-13974 - pNFS/flexfiles: fix incorrect size check in decodenfsfh CVE-2021-4157 - esp: Fix possible buffer overflow in ESP transformation CVE-2022-27666 - sock: remove...

libvips:sharpen_fuzzer: Segv on unknown address in jxl::N_AVX2::XYBStage<jxl::N_AVX2::PerChannelOp<jxl::N_AVX2::Op709> >::ProcessRo

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6150953935437824 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: sharpenfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash Stat...

UBUNTU-CVE-2014-125024

A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lagdecodeframe. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue...

UBUNTU-CVE-2014-125019

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodenalunit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix thi...

UBUNTU-CVE-2014-125025

A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decodepulses. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue...

UBUNTU-CVE-2014-125022

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shortendecodeframe of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this...

UBUNTU-CVE-2014-125020

A vulnerability has been found in FFmpeg 2.0 and classified as critical. This vulnerability affects the function decodeupdatethreadcontext. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue...

PT-2022-7780

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A critical issue has been found in the function decode update thread context, leading to memory corruption. The attack can be initiated remotely. Recommendations For FFmpeg version 2.0, apply a patch to fix this...

PT-2022-7784

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A critical issue has been found, affecting the function lag decode frame. This issue leads to memory corruption and can be exploited remotely. Recommendations For FFmpeg version 2.0, it is recommended to apply a...

PT-2022-7779

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A vulnerability was found in the function decode nal unit of the component Slice Segment Handler, leading to memory corruption. The manipulation can be initiated remotely. Recommendations For FFmpeg version 2.0, ...

FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the Ffmpeg team. FFmpeg truemotion1decodeheader suffers from a denial-of-service vulnerability that can be exploited by attackers to cause a denial-of-service attack...

PT-2022-7782

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A vulnerability was found in the function shorten decode frame of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. Recommendations For...

FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg decodesliceheader function, which can be exploited by an attacker to cause a denial of service attack...

FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A code execution vulnerability exists in the FFmpeg lagdecodeframe function, which could be exploited by attackers to execute arbitrary code on the system...