CVE-2024-20007

CVE-2024-20007 affects MediaTek MP3 decoder: a race condition could trigger an out-of-bounds write, enabling remote escalation of privileges with user interaction required. Public details confirm the mp3 decoder component and patch ALPS08441369; exploitation status is not provided in the sources....

CVE-2024-20007

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

CVE-2024-20007

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a race condition in the mp3 decoder module that may result in out-of-bounds writes...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to incorrect error handling in the alac decoder module, which may result in out-of-bounds writes...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from an incorrect boundary check in the alac decoder module, which could lead to information disclosure...

PT-2024-18495 · Unknown · Mp3 Decoder

Name of the Vulnerable Software and Affected Versions: mp3 decoder affected versions not specified Description: The issue is related to a possible out of bounds write due to a race condition in the mp3 decoder. This could lead to remote escalation of privilege with no additional execution...

PT-2024-18499 · Unknown · Alac Decoder

Name of the Vulnerable Software and Affected Versions: alac decoder affected versions not specified Description: In the alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges neede...

PT-2024-18496 · Unknown · Alac Decoder

Name of the Vulnerable Software and Affected Versions: alac decoder affected versions not specified Description: The issue is related to an incorrect error handling in the alac decoder, which could lead to a possible out of bounds write. This could result in remote escalation of privilege with no...

The vulnerability of the JPEG XL decoder in the FFmpeg multimedia library allows a hacker to execute arbitrary code.

The vulnerability of the JPEG XL decoder in the FFmpeg multimedia library is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the jpegxl_anim_read_packet() function in the JPEG XL decoder allows a hacker to execute arbitrary code.

The vulnerability of the jpegxlanimreadpacket function in the JPEG XL decoder, a multimedia library from FFmpeg, is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

SUSE CVE-2024-22860

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxlanimreadpacket component in the JPEG XL Animation decoder...

CVE-2024-22860

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxlanimreadpacket component in the JPEG XL Animation decoder...

CVE-2024-22860

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxlanimreadpacket component in the JPEG XL Animation decoder...

Integer overflow

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxlanimreadpacket component in the JPEG XL Animation decoder...

CVE-2024-22860

FFmpeg before n6.1 is vulnerable to an integer overflow in the JPEG XL Animation decoder (jpegxl_anim_read_packet), enabling remote code execution. The issue affects FFmpeg’s handling of that component and is classified as critical by CVSS v3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The vulnerabi...

CVE-2024-22860

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxlanimreadpacket component in the JPEG XL Animation decoder...

CVE-2024-22860

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxlanimreadpacket component in the JPEG XL Animation decoder...

CVE-2024-22860

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxlanimreadpacket component in the JPEG XL Animation decoder...

CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...