CVE-2022-43250: Out-of-bounds Write

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via putqpel00fallback16 in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

CVE-2022-43253

CVE-2022-43253 affects Libde265 v1.0.8 and describes a heap-buffer-overflow in fallback-motion.cc: put_unweighted_pred_16_fallback, leading to Denial of Service via a crafted video file. Connected sources corroborate the same issue across multiple advisories and trackers. Public details specify t...

CVE-2022-43244: Out-of-bounds Write

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via putqpelfallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

Libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.8, which stems from putepelhvfallback in fallback-motion.cc contains a heap buffer overflow that can be exploited by an attacker to cause a denial of service DoS via a crafted video file...

Libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.8, which originates from void putepelhvfallback in fallback-motion.cc contains a stack buffer overflow that can be exploited by an attacker to cause a denial of service DoS via a crafted video file...

Libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.8, which stems from putweightedpredavg16fallback in fallback-motion.cc contains a heap buffer overflow that can be exploited by an attacker to cause a denial of service DoS via a crafted video file...

Libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.8, which stems from putqpelfallback in fallback-motion.cc contains a heap buffer overflow that can be exploited by an attacker to cause a denial of service DoS via a crafted video file...

CVE-2022-43237

Libde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via void putepelhvfallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

CVE-2022-43248

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via putweightedpredavg16fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

CVE-2022-43250

CVE-2022-43250 affects libde265 v1.0.8. A heap-buffer-overflow in put_qpel_0_0_fallback_16 (fallback-motion.cc) can allow a crafted video file to trigger a Denial of Service. Connected advisories confirm multiple vendors require upgrades to newer libde265 releases to mitigate, e.g. Debian DSA-534...

Recursive call attack of the fallback function of Holographer

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. The fallback function will forward all calls except those that appear in Holographer to the HolographerEnforcer which is obtained by calling address holographEnforcer = getHolographEnforcer; However, if...

harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc

A vulnerability found in harfbuzz. An integer overflow in the hb-ot-shape-fallback.cc component allows attackers to cause a denial of service DoS via unspecified vectors...

harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc

A vulnerability found in harfbuzz. An integer overflow in the hb-ot-shape-fallback.cc component allows attackers to cause a denial of service DoS via unspecified vectors...

PT-2022-7256 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 versions 1.0.8 Description: The issue is related to a stack-buffer-overflow in the put epel hv fallback function when handling unsigned short data types. This allows attackers to cause a Denial of Service DoS via a crafted video file...

PT-2022-7261 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to a heap-buffer-overflow vulnerability in the put epel 16 fallback function of the Libde265 video codec implementation for h.265. This vulnerability can be exploited by a remote attack...

PT-2022-7257 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to a stack-buffer-overflow vulnerability via the put qpel fallback function in fallback-motion.cc, which can be exploited by attackers to cause a Denial of Service DoS using a crafted...

PT-2022-7254 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 versions prior to 1.0.11 Description: The issue is related to a heap-buffer-overflow in the put weighted pred avg 16 fallback function, located in fallback-motion.cc, which can be exploited by attackers to cause a Denial of Service D...

The vulnerability of the hb-ot-shape-fallback.cc component in the Harfbuzz text transformation library, which allows a hacker to trigger a service failure.

The vulnerability of the hb-ot-shape-fallback.cc component in the Harfbuzz text transformation library is related to a numerical overflow in the hb-ot-shape-fallback.cc file. Exploiting this vulnerability could allow an attacker to cause a service failure by sending specially crafted data to the...

ROS-20220721-02

A vulnerability in the Harfbuzz text conversion library involves an integer overflow in the hb-ot-shape-fallback.cc file. Exploitation of the vulnerability could allow an attacker acting remotely to pass specially crafted data to an application, cause an integer overflow, and cause the applicatio...

AxelarDepositService: When wrappedToken is not weth, sendNative may cause users to lose ether.

Lines of code Vulnerability details Impact In the sendNative function of the AxelarDepositService contract, the wrappedToken address is treated as weth-like and the wrappedToken's deposit function is called. If the wrappedToken address is TokenType.External token and is not weth-like and the...