vlc:vlc-demux-dec-libfuzzer-mkv: Segv on unknown address in decode_segment

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4730154118348800 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mkv Job Type: aflasanvlc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

Amazon Linux 2023 : gstreamer1-plugins-good, gstreamer1-plugins-good-gtk (ALAS2023-2026-1926)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1926 advisory. Heap buffer overflow in the Matroska MKV demuxer when calculating decompressed buffer sizes for bz2-compressed tracks. The issue occurs due to missing parentheses in the buffer size calculatio...

vlc:vlc-demux-dec-libfuzzer-mkv: Heap-buffer-overflow in libmatroska::KaxInternalBlock::ReadData

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4550679799857152 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mkv Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x7add05ce9234...

vlc:vlc-demux-dec-libfuzzer-mkv: Heap-buffer-overflow in Read

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5134971554824192 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mkv Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x74de560f7741...

vlc:vlc-demux-dec-libfuzzer-mkv: Crash in mkv::matroska_segment_c::TrackInit

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6599985985814528 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer-mkv Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x576deb0ca001...

vlc:vlc-demux-dec-libfuzzer-mkv: Heap-buffer-overflow in Open

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6136429913899008 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer-mkv Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

vlc:vlc-demux-dec-libfuzzer-mkv: Heap-buffer-overflow in mkv::matroska_segment_c::TrackInit

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6538006856269824 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer-mkv Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

vlc:vlc-demux-dec-libfuzzer-mkv: Heap-use-after-free in mkv::SegmentSeeker::mkv_jump_to

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5100627800948736 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer-mkv Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

vlc:vlc-demux-dec-libfuzzer: Heap-use-after-free in mkv::SegmentSeeker::mkv_jump_to

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5799326749360128 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

Linux Distros Unpatched Vulnerability : CVE-2019-14778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. CVE-2019-14778 Note that Nessus...

gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using HEADERSTRIP decompression. This vulnerability can result in application crash, memory corruption, and code execution...

SUSE CVE-2019-14778

The mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free...

CVE-2022-1924

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using lzo decompression. This vulnerability can result in application crash, memory corruption, and code execution...

CVE-2022-1925

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using HEADERSTRIP decompression. This vulnerability can result in application crash, memory corruption, and code execution...

CVE-2022-1923

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using bzip decompression. This vulnerability can result in application crash, memory corruption, and code execution...

CVE-2022-1922

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using zlib decompression. This vulnerability can result in application crash, memory corruption, and code execution...

CVE-2022-1920

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska file. This vulnerability can result in application crash, memory corruption, and code execution...

OESA-2022-1736 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

UBUNTU-CVE-2019-14778

The mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free...

VideoLAN VLC Media Player MKV Demuxer Code Execution

Added: 06/27/2011 CVE: CVE-2011-0531 BID: 46060 OSVDB: 70698 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem VideoLan VLC 1.1.6.1 and earlier are vulnerable to a remote code execution vulnerability as a result of insufficien...