CVE-2022-37416

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...

CVE-2022-37416

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...

CVE-2022-37416

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...

Design/Logic Flaw

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...

CVE-2022-37416

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...

CVE-2022-37416

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...

CVE-2022-37416

CVE-2022-37416 affects Ittiam libmpeg2, where versions prior to 2022-07-27 use memcpy with overlapping memory blocks in the impeg2_mc_fullx_fully_8x8 function. The vulnerability description and multiple advisories (e.g., Red Hat, SUSE, Alpine Linux, PRION, CNNVD) consistently cite this issue as a...

Ittiam Systems libmpeg2 安全漏洞

Ittiam Systems libmpeg2 is an open source library of MPEG-1 and MPEG-2 video stream decoding functions from Ittiam Systems. A security vulnerability exists in Ittiam Systems libmpeg2 versions prior to 2022-07-27, which stems from the use of memcpy with overlapping memory blocks, and can be...

PT-2022-23984 · Ittiam · Ittiam Libmpeg2

Name of the Vulnerable Software and Affected Versions: Ittiam libmpeg2 versions prior to 2022-07-27 Description: The issue is related to the use of memcpy with overlapping memory blocks in the impeg2 mc fullx fully 8x8 function. Recommendations: For versions prior to 2022-07-27, update to a versi...

CVE-2022-37416: Undefined Security Weakness

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...

new packages: libmpeg2

An update is available for libmpeg2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

libmpeg2:mpeg2_dec_fuzzer: Memcpy-param-overlap in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5732984619008000 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzerasanlibmpeg2 Platform Id: linux Crash Type: Memcpy-param-overlap Cras...

libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_process

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5683041813135360 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzermsanlibmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_weave_blk

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5753309893230592 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzerasanlibmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_process

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5639178787749888 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzermsanlibmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_process

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5658943661015040 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzerasani386libmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_weave_blk

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5663742011899904 Project: libmpeg2 Fuzzing Engine: afl Fuzz Target: mpeg2decfuzzer Job Type: aflasanlibmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

libmpeg2:mpeg2_dec_fuzzer: Heap-buffer-overflow in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5672508879011840 Project: libmpeg2 Fuzzing Engine: afl Fuzz Target: mpeg2decfuzzer Job Type: aflasanlibmpeg2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

Remote code execution

In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0...

CVE-2019-2028

In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0...