PT-2022-6473 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: libde265 versions 1.0.8 Description: An issue was discovered in libde265, where there is a Heap-use-after-free in intrapred.h when decoding a file using dec265. This could allow a remote attacker to cause a denial of service. Recommendations:...

多款Qualcomm产品代码问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and are from time to time fabricated on the surface of semiconductor wafers. A code issue vulnerability exists in Qualcomm products that could...

PT-2022-14265 · Mediatek · Libmtkomxgsmdec

Name of the Vulnerable Software and Affected Versions: libMtkOmxGsmDec affected versions not specified Description: The issue is related to an incorrect bounds check in libMtkOmxGsmDec, which could lead to local information disclosure without requiring additional execution privileges. User...

[SECURITY] Fedora 34 Update: libopenmpt-0.5.15-1.fc34

libopenmpt is a cross-platform C++ and C library to decode tracked music files modules into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project Open ModPlug Tracker. In order to avoid code base fragmentation, libopenmpt is developed in the same source code...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in Wolfssl wolfMQTT that stems from the product's failure to properly determine memory boundaries when calling MqttDecodePublish from...

PT-2021-28002

Name of the Vulnerable Software and Affected Versions stb versions affected versions not specified Description The issue is related to a global buffer overflow read error. Technical details about the crash include the involvement of specific function names such as stbi jpeg decode block, stbi...

stb:stbi_read_fuzzer: Global-buffer-overflow in stbi__jpeg_decode_block

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5165030079856640 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerasanstb Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000603a68...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in ff_simple_idct_put_int16_10bit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4925325908246528 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

CVE-2021-40418

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

CLSA-2021-1640002354 Fix of CVE: CVE-2021-43527

CVE-2021-43527: Fix memory corruption in decodeECorDsaSignature with DSA signatures and RSA-PSS - Update to CKBI 2.50 from NSS 3.67 - Removing: - Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - Certificate "AddTrust Low-Value Services Root" - Certificate "AddTrust...

Fedora: Security Advisory for dr_libs (FEDORA-2021-c2dc9abd76)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: dr_libs-0-0.7.20211208git49de65c.fc35

Single-file audio decoding libraries for C/C++...

[SECURITY] Fedora 34 Update: dr_libs-0-0.7.20211208git49de65c.fc34

Single-file audio decoding libraries for C/C++...

stb:stbi_read_fuzzer: Global-buffer-overflow in stbi__decode_jpeg_image

Detailed Report: https://oss-fuzz.com/testcase?key=5825158852509696 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerasanstb Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000603a54 Crash State: stbidecodejpegimage stbijpegloa...

CVE-2021-37187

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file with reversible passwords from the device, which allows decoding of other users' passwords...

CVE-2021-37187

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file with reversible passwords from the device, which allows decoding of other users' passwords...

OESA-2021-1455 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

PT-2021-27924

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash has been reported, involving the uncompress b44 impl, default decompress chunk, and exr decoding run functions. No...

draco:draco_mesh_decoder_without_dequantization_fuzzer: Global-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5701542311755776 Project: draco Fuzzing Engine: honggfuzz Fuzz Target: dracomeshdecoderwithoutdequantizationfuzzer Job Type: honggfuzzasandraco Platform Id: linux Crash Type: Global-buffer-overflow REA...

UBUNTU-CVE-2021-21707

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexmlloadfile, URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the...