Lucene search
+L

64 matches found

BDU FSTEC
BDU FSTEC
•added 2024/04/09 12:00 a.m.•22 views

The vulnerability of the UncompressedImageCodec::get_luma_bits_per_pixel_from_configuration_unci() function in the decoder and file format encoder of the libheif library allows a attacker to cause a service failure.

The vulnerability of the UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci function in the file format decoders and encoders for the libheif library is related to a segmentation error. Exploiting this vulnerability could allow an attacker to cause service failures...

10CVSS7.5AI score0.00762EPSS
SaveExploits1References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/02/12 12:00 a.m.•18 views

The vulnerability of the mc_luma() function in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the mcluma function in the h.265 Libde265 video codec implementation is related to the issue where the output operation goes beyond the buffer boundaries when processing the unsigned char data type. Exploiting this vulnerability can allow a remote attacker to cause a service...

7.8CVSS7.1AI score0.00918EPSS
SaveExploits1References10Affected Software6
OSV
OSV
•added 2023/12/07 8:15 p.m.•8 views

ALPINE-CVE-2023-49465

Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function at motion.cc...

8.8CVSS7.3AI score0.00798EPSS
SaveExploits1References1
OSV
OSV
•added 2023/12/07 8:15 p.m.•6 views

DEBIAN-CVE-2023-49464

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...

8.8CVSS7.9AI score0.00762EPSS
SaveExploits1References1
OSV
OSV
•added 2023/12/07 8:15 p.m.•7 views

DEBIAN-CVE-2023-49465

Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function at motion.cc...

8.8CVSS6.2AI score0.00798EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/12/07 8:15 p.m.•27 views

CVE-2023-49464

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...

8.8CVSS7.3AI score0.00762EPSS
SaveExploits1References2
OSV
OSV
•added 2023/12/07 8:15 p.m.•13 views

UBUNTU-CVE-2023-49465

Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function at motion.cc...

8.8CVSS6.7AI score0.00798EPSS
SaveExploits1References4
OSV
OSV
•added 2023/12/07 8:15 p.m.•10 views

UBUNTU-CVE-2023-49464

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...

8.8CVSS7.3AI score0.00762EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/12/07 12:00 a.m.•22 views

libheif Security Vulnerabilities

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. A security vulnerability exists in libheif version v1.17.5, which stems from the inclusion of a segmentation violation via the UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci discovery function...

8.8CVSS8.6AI score0.00762EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2023/12/07 12:00 a.m.•96 views

CVE-2023-49465

Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function at motion.cc...

8.8CVSS8.6AI score0.00798EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2023/11/23 12:00 a.m.•8 views

PT-2023-8338 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.14 Description: The issue is related to a heap-buffer-overflow vulnerability in the derive spatial luma vector prediction function. This vulnerability may allow a remote attacker to impact the confidentiality, integrity,...

10CVSS7.4AI score0.00979EPSS
SaveExploits6References65
SUSE CVE
SUSE CVE
•added 2023/09/02 1:54 a.m.•7 views

SUSE CVE-2023-40188

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalLumaToYUV444 function. This Out-Of-Bounds Read occurs because processing is done on the in variable without checking if it...

5.3CVSS6.9AI score0.01476EPSS
SaveExploits1References5
OSV
OSV
•added 2023/08/31 10:15 p.m.•14 views

UBUNTU-CVE-2023-40188

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalLumaToYUV444 function. This Out-Of-Bounds Read occurs because processing is done on the in variable without checking if it...

9.1CVSS6.8AI score0.01476EPSS
SaveExploits1References5
OSV
OSV
•added 2023/08/30 2:01 p.m.•14 views

OSV-2023-769 Index-out-of-bounds in derive_spatial_luma_vector_prediction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61844 Crash type: Index-out-of-bounds Crash state: derivespatiallumavectorprediction filllumamotionvectorpredictors motionvectorsandrefindices...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/08/30 12:00 a.m.•8 views

PT-2023-35986 · Git +1 · Kimageformats

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to an index-out-of-bounds crash. Technical details about the crash include the functions derive spatial luma vector prediction, fill...

6.8AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/08/21 12:00 a.m.•21 views

The vulnerability of the `derive_spatial_luma_vector_prediction` function in the `motion.cc` component of the H.265 Libde265 video encoder allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the derivespatiallumavectorprediction function in the motion.cc component of the H.265 Libde265 codec implementation is related to buffer overflow attacks. Exploiting this vulnerability could allow attackers to access confidential data, compromise its integrity, and even caus...

7.8CVSS7.5AI score0.00333EPSS
SaveExploits1References7Affected Software3
OSS-Fuzz
OSS-Fuzz
•added 2023/06/28 4:53 p.m.•11 views

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Memcpy-param-overlap in put_hevc_pel_uni_pixels_10

Detailed Report: https://oss-fuzz.com/testcase?key=4992746590175232 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0xf6635d00,0xf6635d10 and 0xf6635cfc, 0xf6635d0...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2023/04/15 11:58 p.m.•17 views

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Memcpy-param-overlap in put_hevc_pel_uni_pixels_9

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4717458841010176 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

5.9AI score
SaveExploits0
OSV
OSV
•added 2023/03/01 3:15 p.m.•4 views

DEBIAN-CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits1References1
OSV
OSV
•added 2023/03/01 3:15 p.m.•13 views

UBUNTU-CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8CVSS7.1AI score0.00333EPSS
SaveExploits1References3
Rows per page
Query Builder