CVE-2025-48592

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48592

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48592

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48592

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48592

CVE-2025-48592 describes a vulnerability in the C2SoftDav1dDec.cpp decoder where in initDecoder there is an out-of-bounds read caused by a heap buffer overflow. This can lead to remote information disclosure without extra privileges or user interaction. The available connected sources (Red Hat, E...

PT-2025-43479

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the initDecoder function in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the initDecoder function /media/libstagefright/codecs/hevcdec/SoftHEVC.cpp in the Android operating system is related to writing data beyond the buffer into memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code within the context of a...

Design/Logic Flaw

In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer allocation fails. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for...