10089 matches found
libavc:mvc_dec_fuzzer: Heap-buffer-overflow in ih264d_get_bits_h264
Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=5143081216507904 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: mvcdecfuzzer Job Type: libfuzzerasani386libavc Platform Id:...
Important: jasper
Issue Overview: A flaw was found in the Jasper tool's jpc encoder. This flaw allows an attacker to craft input provided to Jasper, causing an arbitrary out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2020-27828 ...
The vulnerability of the decoder_context::processSliceSegmentHeader function (decctx.cc) in the implementation of the h.265 Libde265 video codec allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the decodercontext::processSliceSegmentHeader function decctx.cc in the H.265 Libde265 video codec implementation is related to pointer swapping errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...
CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / golang / kubevirt / skopeo / telegraf (CVE-2022-41723)
The version of application-gateway-kubernetes-ingress / golang / kubevirt / skopeo / telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41723 advisory. - A maliciously crafted HTTP/2 stream...
ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in pps_multilayer_extension
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4505349045747712 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...
CVE-2023-28968
An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder JDPI-Decoder Application Signature component of Junos OS's AppID service on SRX Series devices will stop the JDPI-Decoder from identifying dynamic application traffic, allowi...
Memory corruption
An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder JDPI-Decoder Application Signature component of Junos OS's AppID service on SRX Series devices will stop the JDPI-Decoder from identifying dynamic application traffic, allowi...
CVE-2023-28968 Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open
An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder JDPI-Decoder Application Signature component of Junos OS's AppID service on SRX Series devices will stop the JDPI-Decoder from identifying dynamic application traffic, allowi...
Juniper Networks Junos OS 安全漏洞
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability in the Juniper Networks Junos OS AppID service on SRX Series devices, which arises from an...
CVE-2023-28968: Improperly Controlled Sequential Memory Allocation
An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder JDPI-Decoder Application Signature component of Junos OS's AppID service on SRX Series devices will stop the JDPI-Decoder from identifying dynamic application traffic, allowi...
CVE-2023-28968 Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open
An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder JDPI-Decoder Application Signature component of Junos OS's AppID service on SRX Series devices will stop the JDPI-Decoder from identifying dynamic application traffic, allowi...
CVE-2023-28968
CVE-2023-28968 : An Improperly Controlled Sequential Memory Allocation in the JDPI-Decoder Application Signature (part of Junos OS AppID) can cause the JDPI-Decoder to stop identifying dynamic application traffic, allowing unauthenticated network-based traffic to pass through. Affected components...
PT-2023-22056
Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 19.1R3-S10 Junos OS versions 19.2 prior to 19.2R3-S7 Junos OS versions 19.3 prior to 19.3R3-S8 Junos OS versions 19.4 prior to 19.4R3-S11 Junos OS version 20.1R1 and later versions prior to 20.2R3-S7 Junos OS version...
ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Memcpy-param-overlap in put_hevc_pel_uni_pixels_9
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4717458841010176 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...
PT-2025-49478
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the media subsystem, specifically within the MediaTek vcodec decoder queue setup function. A user-supplied variable, nplanes, obtained through a syste...
PT-2023-3303
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.2 Description The issue is related to a use-after-free vulnerability in the rkvdec remove function within the Rockchip Video Decoder driver in the Linux kernel. This vulnerability is caused by a race conditio...
ffmpeg:ffmpeg_AV_CODEC_ID_MPEG2VIDEO_fuzzer: Heap-buffer-overflow in put_pixels16_8_c
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6094366187061248 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMPEG2VIDEOfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...
Out-of-bounds
The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet...
CVE-2023-1801
CVE-2023-1801 concerns tcpdump’s SMB protocol decoding, where the SMB protocol decoder in tcpdump 4.99.3 can perform an out-of-bounds write when parsing a crafted network packet. The vulnerability is network-exploitable and impacts systems running tcpdump against SMB traffic; the NVD metrics show...
