DEBIAN-CVE-2023-48014

GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevcparsevpsextension function at /mediatools/avparsers.c...

UBUNTU-CVE-2023-48014

GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevcparsevpsextension function at /mediatools/avparsers.c...

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version v2.3-DEV-rv566-g50c2ab06f-master, which stems from a buffer overflow vulnerability in the function hevcparsevpsextension...

PT-2023-8943 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev566-g50c2ab06f-master Description: The issue is related to a stack overflow in the hevc parse vps extension function, located in the media tools/av parsers.c file. This is caused by incorrect use of dynamic memory duri...

Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2023-64870)

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions, which can be exploited by an...

Microsoft Windows HEVC Video Extensions RCE (August 2023)

The Windows 'HEVC Video Extensions' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploits this vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted...

Microsoft Windows HEVC Video Extension from Device Manufacturer RCE (August 2023)

The Windows 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploits this vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially...

CVE-2023-38170

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2023-38170

HEVC Video Extensions Remote Code Execution Vulnerability...

Remote code execution

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2023-38170 HEVC Video Extensions Remote Code Execution Vulnerability

...

CVE-2023-38170

CVE-2023-38170 concerns the HEVC Video Extensions component on Windows. The vulnerability is a remote code execution issue tied to the HEVC Video Extensions, with the CVSSv3.1 vector indicating a local attack requiring user interaction and potential for arbitrary code execution with high impact (...

CVE-2023-38170 HEVC Video Extensions Remote Code Execution Vulnerability

...

HEVC Video Extensions Remote Code Execution Vulnerability

...

Microsoft HEVC Video Extensions 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions, which can be exploited by an...

The vulnerability of the ff_hevc_put_hevc_qpel_pixels_8_sse function in the h.265 Libde265 implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ffhevcputhevcqpelpixels8sse function in the H.265 Libde265 video codec implementation is related to copying buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the slice.cc component in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the slice.cc component in the h.265 Libde265 video codec implementation is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the ff_hevc_put_unweighted_pred_8_sse function (sse-motion.cc) in the h.265 Libde265 video codec implementation allows a hacker to cause a service failure.

The vulnerability of the ffhevcputunweightedpred8sse function sse-motion.cc in the h.265 Libde265 video codec implementation is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created input file...

The vulnerability of the ff_hevc_put_hevc_epel_pixels_8_sse function (sse-motion.cc) in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the ffhevcputhevcepelpixels8sse function sse-motion.cc in the H.265 Libde265 video codec implementation is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

The vulnerability of the ff_hevc_put_weighted_pred_avg_8_sse function (sse-motion.cc) in the h.265 video codec implementation by libde265, which allows a hacker to trigger a service failure.

The vulnerability of the ffhevcputweightedpredavg8sse function sse-motion.cc in the h.265 video codec implementation by libde265 is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to trigger a Denial-of-Service attack using the created input file...