22 matches found
CVE-2026-63633: Heap-based Buffer Overflow
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdpdspdecodeopus in libfreerdp/codec/dsp.c calls StreamEnsureRemainingCapacity on context-common.buffer even though opusdecode writes decoded PCM into the caller-supplied out stream. A malicious RDP server that...
ffmpeg:ffmpeg_AV_CODEC_ID_LIBOPUS_DEC_fuzzer: Use-of-uninitialized-value in silk_decode_core
Detailed Report: https://oss-fuzz.com/testcase?key=4980177013899264 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBOPUSDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: silkdecodecore...
ffmpeg:ffmpeg_AV_CODEC_ID_LIBOPUS_DEC_fuzzer: Use-of-uninitialized-value in silk_decode_core
Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6253238758473728 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBOPUSDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...
opus security breach
opus is an open source native binding to libopus v1.3 by discord.js. A security vulnerability exists in opus that stems from supplying input objects with the toString attribute to several different functions, making it susceptible to denial of service DoS attacks...
OPENSUSE-SU-2024:11132-1 libopus-devel-1.3.1-3.8 on GA media
These are all security issues fixed in the libopus-devel-1.3.1-3.8 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2017-0381
An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...
Denial of Service (DoS)
Overview @discordjs/opus is a native bindings to libopus. Affected versions of this package are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash. PoC // Zero channels: javascript const OpusEncode...
EulerOS 2.0 SP3 : opus (EulerOS-SA-2020-2071)
According to the version of the opus package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data...
The vulnerability of the Android operating system, which allows a hacker to gain unauthorized access to the device
The vulnerability in the silk/NLSFstabilize.c function of the libopus media server in the Android operating system arises from an operation that goes beyond the buffer boundaries on the stack. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized acce...
Denial Of Service (DoS) Or Remote Code Execution (RCE)
libopus is vulnerable to remote code execution or denial of service attacks. The vulnerability exists because silk/NLSFstabilize.c does not properly validate the negative input when computing a minimum distance...
MGASA-2017-0029 Updated opus packages fix security vulnerability
A remote code execution vulnerability in silk/NLSFstabilize.c in libopus could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing CVE-2017-0381...
Updated opus packages fix security vulnerability
A remote code execution vulnerability in silk/NLSFstabilize.c in libopus could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing CVE-2017-0381...
CVE-2017-0381
An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...
CVE-2017-0381
An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...
DEBIAN-CVE-2017-0381
An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...
Information disclosure
An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...
UBUNTU-CVE-2017-0381
An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...
CVE-2017-0381
An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...
CVE-2017-0381
An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...
CVE-2017-0381
CVE-2017-0381 is an information-disclosure vulnerability in silk/NLSF_stabilize.c within libopus used by Mediaserver, affecting Android versions 5.0.2–7.1. It could allow a local malicious app to access data outside its permissions. The concrete root: a flaw in Opus handling as described in the C...