libvpx:vpx_dec_fuzzer_vp9: Check failed in CheckUnwind

Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=4682917367906304 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxdecfuzzervp9 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Check failed Crash Address: Crash State:...

libvpx:vpx_dec_fuzzer_vp9: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5942380020236288 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxdecfuzzervp9 Job Type: libfuzzerubsanlibvpx Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x010100000000 Crash State: NULL Sanitizer: undefined UBSAN...

[SECURITY] Fedora 36 Update: golang-github-francoispqt-gojay-1.2.13-7.fc36

GoJay is a performant JSON encoder/decoder for Golang currently the most performant, see benchmarks. It has a simple API and doesn't use reflection. It relies on small interfaces to decode/encode structures and slices. Gojay also comes with powerful stream decoding features and an even faster...

libvpx:vpx_dec_fuzzer_vp9: Segv on unknown address in std::__Fuzzer::pair<std::__Fuzzer::__hash_iterator<std::__Fuzzer::__hash_node<st

Detailed Report: https://oss-fuzz.com/testcase?key=5824217953730560 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxdecfuzzervp9 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

PT-2022-37067

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the string decoder getc utf 8, text decoder getc, and ReadClause functions...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBVPX_VP9_fuzzer: Heap-buffer-overflow in vp9_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5437551174877184 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDLIBVPXVP9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

libvpx:vpx_dec_fuzzer_vp9: Check failed in CheckUnwind

Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=6591962450362368 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxdecfuzzervp9 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Check failed Crash Address: Crash State:...

Tencent WeChat WXAM Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

The vulnerability of decoders for ALAC files from microprogramming software for MediaTek’s MT6570, MT6580, MT6735, and MT6737 chips allows attackers to enhance their privileges.

The vulnerability of ALAC-file decoders in microprogramming software for MediaTek’s MT6570, MT6580, MT6735, and MT6737 chips is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in ff_simple_idct_put_int16_8bit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6520660484030464 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

CVE-2014-125014

A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue...

UBUNTU-CVE-2014-125005

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodevolheader of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix...

UBUNTU-CVE-2014-125014

A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue...

UBUNTU-CVE-2014-125003

A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function getsiz of the file libavcodec/jpeg2000dec.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue...

CVE-2014-125014

A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue...

Memory corruption

A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue...

CVE-2014-125014 FFmpeg HEVC Video Decoder memory corruption

A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue...

CVE-2014-125014 FFmpeg HEVC Video Decoder memory corruption

A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue...

CVE-2014-125014

CVE-2014-125014 affects FFmpeg 2.0, targeting the HEVC Video Decoder. The vulnerability is a memory corruption issue in an unknown decoder functionality, with the potential for remote exploitation. Multiple trusted advisories (Red Hat, Debian, Ubuntu, CNVD, CVE listings) describe the issue and co...