CVE-2019-14003

Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2022-25659

Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2020-11193

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through a double free issue when parsing MKV files caused by zlibdecompressextra in modules/demux/mkv/util.cpp...

Memory Corruption Vulnerability in Lovecraft Universal Player (CNVD-2017-35554)

Aiki Universal Player is a local video software that can also play image files and supports almost all major video formats. A memory corruption vulnerability exists in Aiki Universal Player when parsing the special envoy mkv file format, which can be exploited by attackers to cause a...

ffmpeg library multiple security vulnerabilities

Memory corruption on MKV and AVS/CAVS containers parsing...