CVE-2017-13214

In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android...

CVE-2017-13214

CVE-2017-13214 affects the Hardware HEVC decoder in Android kernel. Affects Android devices processing certain media files, where a page fault can cause remote denial of service in a critical system process. Exploitation is possible over the network with no user interaction and no privileges requ...

CVE-2017-13214: Improper Input Validation

In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android...

CVE-2017-0852

A denial of service vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506...

CVE-2017-14034

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...

CVE-2017-14796

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service integer underflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copyCTBtohv in hevcfilter.c in libavcodec in...

CVE-2017-14795

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service out-of-bounds read and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with hlspcmsample in hevc.c in libavcodec in FFmp...

libbpg Denial of Service Vulnerability (CNVD-2017-34777)

libbpg is a new type of image format library. A security vulnerability exists in the 'hevcwriteframe' function of the libbpg.c file in libbpg version 0.9.7. A remote attacker can exploit this vulnerability to cause a denial of service out-of-bounds read and application crash with the help of a...

libbpg Denial of Service Vulnerability (CNVD-2017-34778)

libbpg is a new type of image format library. A security vulnerability exists in the 'hevcwriteframe' function of the libbpg.c file in libbpg version 0.9.7. A remote attacker can exploit this vulnerability to cause a denial of service integer overflow and application crash with the help of a...

CVE-2017-14734

The buildmsps function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to hevcdecodeinit1...

The vulnerability of the libhevc library of the Android Media Framework service allows a hacker to execute arbitrary code.

The vulnerability of the libhevc library in the Android operating system’s Media Framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Android Media framework hevc decoder denial of service vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.Media framework hevc decoder is one of the hevc decoders for multimedia development. A denial of service vulnerability exists in Media framework hevc decoder in Android. An attacker...

CVE-2017-0728

A denial of service vulnerability in the Android media framework hevc decoder. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37469795...

CVE-2017-0728

A denial of service vulnerability in the Android media framework hevc decoder. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37469795...

CVE-2017-0728

CVE-2017-0728 is a denial-of-service vulnerability in the Android media framework, specifically the HEVC decoder. Affected products/versions: Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The issue is classified as DoS in the Media framework with absence of explicit exploit details in the ...

CVE-2017-0728: Undefined Security Weakness

A denial of service vulnerability in the Android media framework hevc decoder. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37469795...

ffmpeg: Index-out-of-bounds in add_candidate_ref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5012343912136704 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHEVCfuzzer Fuzz target binary: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

The vulnerability of the Android operating system, which allows a perpetrator to cause the device to freeze or restart.

The vulnerability in HevcUtils.cpp within the libstagefright Mediaserver library of the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause the device to freeze or restart through a specially...

UBUNTU-CVE-2017-0407

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass malicious HEVC data to the system to cause an out-of-bounds array access that can lead to the system crashing...