Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

Tencent WeChat WAXM Decoder Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. T...

PT-2021-7906 · Aom +4 · Aom +4

Name of the Vulnerable Software and Affected Versions: AOM version 2.0.1 Description: The issue is related to a NULL pointer dereference in the av1/av1 dx iface.c component of the AOM library, which implements the AV1 codec. This could allow a remote attacker to cause a denial of service. The...

draco:draco_mesh_decoder_without_dequantization_fuzzer: Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5701542311755776 Project: draco Fuzzing Engine: honggfuzz Fuzz Target: dracomeshdecoderwithoutdequantizationfuzzer Job Type: honggfuzzasandraco Platform Id: linux Crash Type: Global-buffer-overflow REA...

PT-2021-6933 · Mediatek · Mediatek Mt8167 +48

Name of the Vulnerable Software and Affected Versions: alac decoder versions affected versions not specified MediaTek MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779,...

Zephyr has an unspecified vulnerability (CNVD-2021-95617)

Zephyr is an open source, small, scalable, real-time operating system. a security vulnerability exists in Zephyr, which stems from the ZephyrJSON decoder incorrectly decoding arrays. No details of the vulnerability are currently available...

PT-2021-7215

Name of the Vulnerable Software and Affected Versions Android SoC versions affected versions not specified MediaTek MT6570 version version not specified MediaTek MT6580 version version not specified MediaTek MT6735 version version not specified MediaTek MT6737 version version not specified...

ASB-A-201895896

In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data

A flaw was found in Netty's netty-codec due to size restrictions for decompressed data in the Bzip2Decoder. By sending a specially-crafted input, a remote attacker could cause a denial of service...

libvips:gifsave_buffer_fuzzer: Heap-buffer-overflow in jxl::N_AVX2::SingleFromSingle

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5256124876587008 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: gifsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

libvips:pngsave_buffer_fuzzer: Crash in void jxl::CopyImageTo<int>

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4743583874285568 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: pngsavebufferfuzzer Job Type: libfuzzerubsanlibvips Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000005540050...

OESA-2021-1435 apache-mina security update

Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: In Apache MINA, a...

libhevc:hevc_dec_fuzzer: Global-buffer-overflow in ihevcd_unpack_coeffs

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5856030433607680 Project: libhevc Fuzzing Engine: afl Fuzz Target: hevcdecfuzzer Job Type: aflasanlibhevc Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

graphicsmagick:coder_J2C_fuzzer: Segv on unknown address in jpc_pchglist_destroy

Detailed Report: https://oss-fuzz.com/testcase?key=6230132319191040 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJ2Cfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: jpcpchglistdestroy...

Mozilla Firefox Security Advisory (MFSA2015-53) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data

A flaw was found in Netty's netty-codec due to size restrictions for decompressed data in the Bzip2Decoder. By sending a specially-crafted input, a remote attacker could cause a denial of service...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_mark_err_slice_skip

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=6177319069286400 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasani386libavc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4...

PT-2021-27887

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the pn buffer append, pni data intern node, and pni...

qpid-proton:fuzz-connection-driver: Heap-buffer-overflow in pn_buffer_append

Project: https://github.com/apache/qpid-proton.git Detailed Report: https://oss-fuzz.com/testcase?key=5990277035196416 Project: qpid-proton Fuzzing Engine: libFuzzer Fuzz Target: fuzz-connection-driver Job Type: libfuzzerasanqpid-proton Platform Id: linux Crash Type: Heap-buffer-overflow READ Cra...

Infinite loop in Apache MINA

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater...