CVE-2020-36440

CVE-2020-36440 : In the libsbc crate for Rust (before 0.1.5), the Decoder type implements Send for any R: Read, allowing it to carry an R that may not be Send. This can enable undefined behavior such as memory corruption or data races if the contained reader is moved across threads. The root caus...

CVE-2021-38188

The CVE-2021-38188 issue concerns the iced-x86 crate (Rust) up to version 1.10.3. The root cause is unsafe use of slice.get_unchecked(slice.length()) in Decoder::new(), which can lead to undefined behavior and potential security impact as described by multiple advisories. Public details consisten...

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in Mozilla Rust versions prior to 0.1.5, which stems from a software libsbc crate that implements Send for any Decoder , for any R: Read, and can be exploited by an attacke...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

Security Bulletin: A vulnerabilty in encoding/unicode in the UTF-16 decoder has been found in x/text package before v0.3.3 for Go that could lead to an infinite loop and denial of service, affecting IBM Cloud Pak for Applications

Summary A vulnerabilty in encoding/unicode in the UTF-16 decoder has been found in x/text package before v0.3.3 for Go that could lead to an infinite loop and denial of service, affecting IBM Cloud Pak for Applications Vulnerability Details CVEID: CVE-2020-14040 DESCRIPTION: Go Language x/text...

PT-2021-5451 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-9 through Android-12 Description: The issue is related to a heap buffer overflow in the C2SoftMP3::process function of C2SoftMp3Dec.cpp, which could lead to remote information disclosure without requiring additional...

libheif Denial of Service Vulnerability (CNVD-2022-06517)

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. libheif version 1.4.0 suffers from a denial-of-service vulnerability. The vulnerability stems from a floating-point exception in the Fraction function. An attacker could exploit this vulnerability to cause a denial of servi...

DEBIAN-CVE-2021-36978

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

CVE-2021-36978

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

UBUNTU-CVE-2021-36978

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

ok-file-formats 缓冲区错误漏洞

ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. A security vulnerability exists in ok-file-formats which allows attackers to cause a denial of service DOS via a crafted jpeg file...

ok-file-formats 缓冲区错误漏洞

ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. A security vulnerability exists in ok-file-formats, which stems from a vulnerability that allows an attacker to cause a denial of service DOS via a crafted jpeg file...

PYSEC-2021-892

libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid...

Weak password vulnerability in NVMS-1000 of Shenzhen Tongwei Digital Technology Co.

NVMS-1000 is a video surveillance management software launched by Shenzhen Tongwei Digital Technology Co., Ltd, which can be used with DVR, NVR, IPC, DVS, decoder and so on. Shenzhen Tongwei Digital Technology Co., Ltd NVMS-1000 suffers from a weak password vulnerability, which can be exploited b...

CVE-2021-0558

In fillMainDataBuf of pvmp3framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Andro...

Apple iOS < 12.5.4 Multiple Vulnerabilities (HT212548)

Binary data appleios1254check.nbin...

[SECURITY] Fedora 34 Update: aom-3.1.1-1.fc34

The Alliance for Open Media=EF=BF=BD=EF=BF=BD=EF=BF=BDs focus is to deliver a next-generation video format that is: - Interoperable and open; - Optimized for the Internet; - Scalable to any modern device at any bandwidth; - Designed with a low computational footprint and optimized for hardware; -...

MGASA-2021-0249 Updated jasper packages fix security vulnerabilities

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened CVE-2021-3443. A NULL pointer dereference fl...

Updated jasper packages fix security vulnerabilities

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened CVE-2021-3443. A NULL pointer dereference fl...

CVE-2021-28678

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data...