Lucene search
+L

664 matches found

Prion
Prion
added 2023/01/03 9:15 p.m.42 views

Out-of-bounds

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374...

4CVSS6.7AI score0.0013EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.11 views

PT-2023-13091 · Unknown · Hevc Decoder

Name of the Vulnerable Software and Affected Versions: hevc decoder affected versions not specified Description: The issue is related to a missing bounds check in the hevc decoder, which could lead to a possible out of bounds write. This could result in local escalation of privilege, with System...

6.7CVSS6.6AI score0.0013EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/01/03 12:00 a.m.16 views

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. MediaTek suffers from a buffer error vulnerability that originates from an out-of-bounds write in the hevc decoder due to a lack of bounds checking, which could result in a local privilege escalation affecting the following...

6.7CVSS6.8AI score0.0013EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/01/03 12:00 a.m.46 views

CVE-2022-32637

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374...

7AI score0.0013EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/01/03 12:00 a.m.7 views

CVE-2022-32637

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374...

7.2AI score0.0013EPSS
SaveExploits0References1
CVE
CVE
added 2023/01/03 12:00 a.m.138 views

CVE-2022-32637

CVE-2022-32637 affects the hevc decoder (MediaTek components) with a missing bounds check causing an out-of-bounds write. This can enable local privilege escalation to System level with no user interaction required. The patch identified is ALPS07491374 (Issue ID ALPS07491374). Exploitation detail...

6.7CVSS6.7AI score0.0013EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/01/01 12:00 a.m.13 views

ASB-A-257860658

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS7.4AI score0.0013EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/02 2:15 p.m.4 views

DEBIAN-CVE-2022-43235

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ffhevcputhevcepelpixels8sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

6.5CVSS6.5AI score0.00881EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/02 2:15 p.m.7 views

ALPINE-CVE-2022-43238

Libde265 v1.0.8 was discovered to contain an unknown crash via ffhevcputhevcqpelh3v3sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

6.5CVSS7.3AI score0.00913EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/02 2:15 p.m.7 views

UBUNTU-CVE-2022-43240

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ffhevcputhevcqpelh2v1sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

6.5CVSS6.9AI score0.009EPSS
SaveExploits1References4
OSV
OSV
added 2022/11/02 1:15 p.m.10 views

UBUNTU-CVE-2022-3810

A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4File::AP4File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS4.8AI score0.00852EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/11/02 12:00 a.m.14 views

Libde265 安全漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.8, which stems from ffhevcputhevcqpelh3v3sse in sse-motion.cc contains an unknown crash that can be exploited by an attacker to cause a denial of service DoS via a crafted video file...

6.5CVSS6.7AI score0.00913EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/11/02 12:00 a.m.10 views

Libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. Libde265 version v1.0.8 suffers from a buffer error vulnerability that stems from ffhevcputhevcqpelv38sse in sse-motion.cc contains unknown crashes, which can be exploited by an attacker to cause a denial of service DoS via a crafted video file...

6.5CVSS7AI score0.009EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/11/02 12:00 a.m.10 views

Libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.8, which originates from ffhevcputhevcqpelh2v1sse in sse-motion.cc contains a stack buffer overflow, which can be exploited by an attacker to cause a denial of service DoS via a crafted video file...

6.5CVSS7AI score0.009EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2022/10/10 12:00 a.m.9 views

PT-2022-7260 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 versions 1.0.8 Description: The issue is related to a heap-buffer-overflow in the ff hevc put hevc epel pixels 8 sse function, which can be exploited by attackers to cause a Denial of Service DoS via a crafted video file. This...

9.8CVSS6.4AI score0.02052EPSS
SaveExploits46References203
Positive Technologies
Positive Technologies
added 2022/10/10 12:00 a.m.10 views

PT-2022-7259 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to the ff hevc put hevc qpel v 3 8 sse function in the Libde265 video codec implementation, which is associated with a buffer overflow in memory. This allows attackers to cause a Denial...

9.8CVSS6.8AI score0.02052EPSS
SaveExploits46References204
Positive Technologies
Positive Technologies
added 2022/10/10 12:00 a.m.8 views

PT-2022-7262 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to the ff hevc put hevc qpel h 3 v 3 sse function in the Libde265 video codec implementation, which can cause a buffer overflow in memory. This can be exploited by a remote attacker usi...

9.8CVSS6.9AI score0.02052EPSS
SaveExploits46References205
CNVD
CNVD
added 2022/07/13 12:00 a.m.73 views

FFmpeg HEVC video decoder denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in FFmpeg HEVC video decoder, which can be exploited by attackers to cause a denial of service attack...

5.5CVSS5.3AI score0.00678EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.14 views

The vulnerability of HEVC Video Extensions relates to insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.02238EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.12 views

The vulnerability of HEVC Video Extensions relates to insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.02532EPSS
SaveExploits0References4
Rows per page
Query Builder