ROS-20250212-07

Vulnerability of JxlEncoderAddJPEGFrame function of JPEG XL decoder of Libjxl library is related to operation outside of memory buffer boundaries. operation beyond the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42313)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42313 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in...

[SECURITY] Fedora 40 Update: jpegxl-0.8.4-1.fc40

This package contains a reference implementation of JPEG XL encoder and decoder...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEX_fuzzer: Heap-buffer-overflow in nb_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4868142996455424 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDSPEEXfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

CVE-2022-32540

Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras wi...

mina-core: Apache MINA: applications using unbounded deserialization may allow RCE

A flaw was found in Apache MINA. The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security checks and defenses. This vulnerability allows attackers to exploit the deserialization process by sendin...

CVE-2024-21463

Memory corruption while processing Codec2 during v13k decoder pitch synthesis...

CLSA-2025-1738693764 squid: Fix of CVE-2024-25111

CVE-2024-25111: Fix uncontrolled recursion bug in HTTP Chunked decoder to prevent DoS attack...

The vulnerability of the CAF decoder in the FFmpeg multimedia library allows a hacker to induce a service failure.

The vulnerability of the CAF decoder in the FFmpeg multimedia library is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

[SECURITY] Fedora 41 Update: jpegxl-0.10.4-1.fc41

This package contains a reference implementation of JPEG XL encoder and decoder...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Crash in ff_aac_usac_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6740617236905984 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACLATMfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

cxl/port: Fix use-after-free, permit out-of-order decoder shutdown

...

Security Bulletin: IBM DataPower Operator vulnerable to DoS due to use of Go (CVE-2024-34155, CVE-2024-34156)

Summary The affected calls are used by DataPower Operator for processing messages exchanged with Kubernetes and IBM DataPower Gateway. Vulnerability Details CVEID:CVE-2024-34156 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a stack exhaustion in Decoder.Decode. By sending...

PT-2025-5665 · Git +1 · Opencv

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported with an UNKNOWN READ crash type. The crash state involves several functions, including cv::PngDecoder::compose frame,...

imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in CompositeImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5205463938957312 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

flac:fuzzer_seek: Crash in process_page_

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5965974443982848 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerseek Job Type: libfuzzermsanflac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x713018000458 Crash State:...

graphicsmagick:coder_TIFF_fuzzer: Use-of-uninitialized-value in jbg_newlen

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5904879758934016 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

CVE-2018-9383

In asn1berdecoder of asn1decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

BIT-PYTHON-MIN-2022-45061

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often...

PT-2025-1336 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned. Description: A possible out-of-bounds read in the asn1 ber decoder function in asn1 decoder.c could lead to local information disclosure with System execution privileges required. No user...