PT-2023-7257

Name of the Vulnerable Software and Affected Versions Adobe Media Encoder versions 24.0.2 and earlier Adobe Media Encoder versions 23.6 and earlier Description The issue is related to an out-of-bounds write that could result in arbitrary code execution in the context of the current user...

PT-2023-7256 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 24.0.2 and earlier Adobe Media Encoder versions 23.6 and earlier Description: The issue is related to an out-of-bounds read when parsing a crafted file, potentially allowing an attacker to execute code in the...

VulnCheck KEV: CVE-2019-5129

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

Adobe Media Encoder < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-63) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-63 advisory. - Adobe Media Encoder version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bounds...

Adobe Media Encoder < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-63)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-63 advisory. - Adobe Media Encoder version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bound...

APSB23-63 : Security update available for Adobe Media Encoder

Adobe has released an update for Adobe Media Encoder. This update resolves critical and moderate vulnerabilities that could lead to arbitrary code execution and memory leak...

VulnCheck KEV: CVE-2019-5127

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decode_CABAC_FL_bypass

Detailed Report: https://oss-fuzz.com/testcase?key=4586467904847872 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decodeCABACFLbypass...

imagemagick:encoder_gif_fuzzer: Use-of-uninitialized-value in cmsMLUsetWide

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6264339090505728 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodergiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

pocketdivxencoder.net Cross Site Scripting vulnerability OBB-3775684

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jbig2enc Security Vulnerabilities

jbig2enc is an encoder for JBIG2. A security vulnerability exists in jbig2enc version v0.28, which stems from a memory segment error SEGV problem in the function jbig2addpage. An attacker could exploit this vulnerability to cause a Denial of Service DoS...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=5577373432807424 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

imagemagick:encoder_png00_fuzzer: Heap-buffer-overflow in cmsMLUsetWide

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5097161997811712 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderpng00fuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void transform_idct_add<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5220040284438528 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

flac:fuzzer_encoder_v2: Use-of-uninitialized-value in process_subframes_

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5684419798892544 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoderv2 Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace

Detailed Report: https://oss-fuzz.com/testcase?key=5483015947812864 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: OpYCbCrtoRGB::convertcolorspac...

imagemagick:encoder_miff_fuzzer: Invalid-free in RelinquishMagickMemory

Detailed Report: https://oss-fuzz.com/testcase?key=6240016852189184 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermifffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Invalid-free Crash Address: 0x631000000800 Crash State: RelinquishMagickMemory...

PT-2023-32951 · Php · Php

Name of the Vulnerable Software and Affected Versions: Base64 Encoder/Decoder WordPress plugin versions 0.9.2 and earlier PHP versions prior to 8.0.30 PHP versions prior to 8.1.22 PHP versions prior to 8.2.8 Description: The issue concerns a lack of CSRF check in the Base64 Encoder/Decoder...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_bipred_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=6143058888228864 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: putweightedbipred8fallback...

imagemagick:encoder_mvg_fuzzer: Heap-buffer-overflow in TraceEllipse

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5176958474125312 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8...