189 matches found
SUSE CVE-2023-49464
libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...
CVE-2023-49464
libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...
DEBIAN-CVE-2023-49464
libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...
libheif Security Vulnerabilities
libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. A security vulnerability exists in libheif version v1.17.5, which stems from the inclusion of a segmentation violation via the UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci discovery function...
libheif Security Vulnerabilities
libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. A security vulnerability exists in libheif version v1.17.5, which stems from the discovery of a containment segmentation violation via the function UncompressedImageCodec::decodeuncompressedimage...
CVE-2021-32024
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...
CVE-2021-32024
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...
Remote code execution
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...
CVE-2021-32024
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...
CVE-2021-32024
CVE-2021-32024 describes a remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4–7.1. The affected component is the BMP image codec; the underlying issue enables an attacker to potentially execute code within the context of the vulnerable process. Documente...
CVE-2021-32024: Improper Validation of Specified Type of Input
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...
CVE-2020-25278
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung IDs are SVE-2020-18088, SVE-2020-18225,...
Code injection
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung IDs are SVE-2020-18088, SVE-2020-18225,...
CVE-2020-25278
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung IDs are SVE-2020-18088, SVE-2020-18225,...
CVE-2020-25278: Out-of-bounds Write
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung IDs are SVE-2020-18088, SVE-2020-18225,...
MMS Exploit Part 3: Constructing the Memory Corruption Primitives
Posted by Mateusz Jurczyk, Project Zero This post is the third of a multi-part series capturing my journey from discovering a vulnerable little-known Samsung image codec, to completing a remote zero-click MMS attack that worked on the latest Samsung flagship devices. New posts will be published a...
CVE-2020-12751
An issue was discovered on Samsung mobile devices with O8.X, P9.0, and Q10.0 software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung ID is SVE-2020-16943 May 2020...
CVE-2020-12751
An issue was discovered on Samsung mobile devices with O8.X, P9.0, and Q10.0 software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung ID is SVE-2020-16943 May 2020...
Code injection
An issue was discovered on Samsung mobile devices with O8.X, P9.0, and Q10.0 software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung ID is SVE-2020-16943 May 2020...
CVE-2020-12751
CVE-2020-12751 affects Samsung mobile devices running O(8.X), P(9.0), and Q(10.0). The Quram image codec library is vulnerable to memory overwrite via crafted JPEG data during decoding, enabling arbitrary code execution on impact. Public sources (NVD, Red Hat, CNVD, and related CVE records) consi...