141 matches found
CVE-2022-37416
Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...
CVE-2022-37416
Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...
CVE-2022-37416
Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...
Design/Logic Flaw
Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...
CVE-2022-37416
Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...
CVE-2022-37416
CVE-2022-37416 affects Ittiam libmpeg2, where versions prior to 2022-07-27 use memcpy with overlapping memory blocks in the impeg2_mc_fullx_fully_8x8 function. The vulnerability description and multiple advisories (e.g., Red Hat, SUSE, Alpine Linux, PRION, CNNVD) consistently cite this issue as a...
CVE-2022-37416
Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...
PT-2022-23984 · Ittiam · Ittiam Libmpeg2
Name of the Vulnerable Software and Affected Versions: Ittiam libmpeg2 versions prior to 2022-07-27 Description: The issue is related to the use of memcpy with overlapping memory blocks in the impeg2 mc fullx fully 8x8 function. Recommendations: For versions prior to 2022-07-27, update to a versi...
Ittiam Systems libmpeg2 安全漏洞
Ittiam Systems libmpeg2 is an open source library of MPEG-1 and MPEG-2 video stream decoding functions from Ittiam Systems. A security vulnerability exists in Ittiam Systems libmpeg2 versions prior to 2022-07-27, which stems from the use of memcpy with overlapping memory blocks, and can be...
new packages: libmpeg2
An update is available for libmpeg2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...
libmpeg2:mpeg2_dec_fuzzer: Memcpy-param-overlap in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv
Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5732984619008000 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzerasanlibmpeg2 Platform Id: linux Crash Type: Memcpy-param-overlap Cras...
libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_process
Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5683041813135360 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzermsanlibmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...
libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_weave_blk
Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5753309893230592 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzerasanlibmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...
libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_process
Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5639178787749888 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzermsanlibmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...
libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_process
Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5658943661015040 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzerasani386libmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...
libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_weave_blk
Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5663742011899904 Project: libmpeg2 Fuzzing Engine: afl Fuzz Target: mpeg2decfuzzer Job Type: aflasanlibmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...
libmpeg2:mpeg2_dec_fuzzer: Heap-buffer-overflow in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv
Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5672508879011840 Project: libmpeg2 Fuzzing Engine: afl Fuzz Target: mpeg2decfuzzer Job Type: aflasanlibmpeg2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...
Remote code execution
In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0...
CVE-2019-2028
In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0...
CVE-2019-2028
CVE-2019-2028 affects Android via libmpeg2 where NEON registers aren’t preserved in multiple hand-crafted functions, enabling potential remote code execution with no privileges and requiring user interaction. Affected Android versions include 7.0–7.1.2, 8.0–8.1, and 9 (Android ID A-120644655). Pu...