CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - 무섭게 보입니다. 아직도 Stagefright와 PNG 버그 취약점들을 기억하시나요.... CVE-2019-2107에서는 디코더/코덱이 mediacodec 사용자로 실행되며, 적절히 "조작된" 비디오타일 활성화 - pspps-i1tilesenabledflag를 통해 RCE가 가능할 수 있습니다. 영향을 받는 코덱은 HVECH.265 및 MPEG-H Part 2입니다. exploit rce android stagefright cve 추가 정보...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - 무섭게 보입니다. 아직도 Stagefright와 PNG 버그 취약점을 기억합니다. CVE-2019-2107을 사용하면 디코더/코덱이 mediacodec 사용자로 실행되며, 적절히 조작된 비디오타일 활성화 - pspps-i1tilesenabledflag를 통해 RCE를 수행할 수 있습니다. 영향을 받는 코덱은 HVEC일명 H.265 및 MPEG-H Part 2입니다. exploit rce android stagefright cve 추가 정보...

CVE-2026-56920

In sdecodevuiparam of fwhevcdecheader.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56920

A logic error in the s_decode_vui_param function within fw_hevc_dec_header.c leads to a possible out-of-bounds write . This vulnerability affects the VPU (Video Processing Unit) component on Google Pixel devices. Successful exploitation could result in Remote Code Execution (RCE) without requirin...

EUVD-2026-78964

In sdecodevuiparam of fwhevcdecheader.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56920

In sdecodevuiparam of fwhevcdecheader.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92315

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the s decode vui param function within the fw hevc dec header.c file allows for an out-of-bounds write. This condition can be exploited to achie...

CVE-2026-54240

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

CVE-2026-54241

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

CVE-2026-54241 libde265: SAO sequential filter heap buffer overflow via signed integer overflow

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

CVE-2026-54241

libde265 , an open-source H.265/HEVC video codec, is affected by a signed 32-bit integer overflow in the SAO (Sample Adaptive Offset) sequential filter input-buffer size calculation. A crafted HEVC stream with large dimensions and 16-bit luma samples causes an undersized allocation, leading to an...

CVE-2026-54240 libde265: Pixel accessor signed integer overflow causes heap OOB read/write

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

CVE-2026-54240 libde265: Pixel accessor signed integer overflow causes heap OOB read/write

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

CVE-2026-54240 libde265: Pixel accessor signed integer overflow causes heap OOB read/write

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

CVE-2026-54240

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow and cause out-of-bounds heap reads or writes, potentially...

CVE-2026-55294

A heap buffer overflow vulnerability exists in the ihevcd_get_tu_data_size function of ihevcd_utils.c within the Media Codecs component. This flaw allows for an out-of-bounds write , which could lead to a local escalation of privilege without requiring additional execution privileges or user inte...

CVE-2026-20464

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...

CVE-2026-20464

A vulnerability exists in the hevc decoder where an integer overflow can lead to an out of bounds write . If an attacker has already obtained System privilege , this flaw could be used to achieve remote escalation of privilege . Exploitation does not require user interaction. Remediation details ...

CVE-2026-20464

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...

CVE-2026-20464

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...