Lucene search
+L

428 matches found

OSV
OSV
added 2021/01/08 6:15 p.m.27 views

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

7.8CVSS7.4AI score0.01473EPSS
Exploits1References4
Prion
Prion
added 2021/01/08 6:15 p.m.18 views

Heap overflow

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

6.8CVSS7.4AI score0.01473EPSS
Exploits1References6Affected Software2
UbuntuCve
UbuntuCve
added 2021/01/08 6:15 p.m.40 views

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

7.8CVSS7.3AI score0.01473EPSS
Exploits1References5
OSV
OSV
added 2021/01/08 6:15 p.m.3 views

UBUNTU-CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

7.8CVSS7.6AI score0.01473EPSS
Exploits1References6
Cvelist
Cvelist
added 2021/01/08 5:40 p.m.39 views

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

7.4AI score0.01473EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2021/01/08 5:40 p.m.50 views

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

7.8CVSS8.6AI score0.01473EPSS
Exploits1
NVD
NVD
added 2020/11/12 10:15 a.m.58 views

CVE-2020-11193

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...

10CVSS9.3AI score0.00896EPSS
Exploits0References1
Prion
Prion
added 2020/11/12 10:15 a.m.22 views

Buffer overflow

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...

10CVSS9.2AI score0.00896EPSS
Exploits0References1
CVE
CVE
added 2020/11/12 10:0 a.m.65 views

CVE-2020-11193

CVE-2020-11193 describes a buffer over-read in Qualcomm/Snapdragon video processing caused by improper typecasting of data returned from atomsize while parsing MKV clips. Affected products cover Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Wearables, and related SoCs (e.g., APQ...

10CVSS9.2AI score0.00896EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/12 10:0 a.m.25 views

CVE-2020-11193

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...

9.3AI score0.00896EPSS
Exploits0References1
Veracode
Veracode
added 2020/09/21 6:33 a.m.23 views

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A use-after-free in the mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp allows an attacker to execute arbitrary code on the host OS...

7.8CVSS3.9AI score0.01455EPSS
Exploits0References8Affected Software1
Veracode
Veracode
added 2020/09/21 6:32 a.m.19 views

Heap Buffer Overflow

vlc:bionic is vulnerable to heap buffer overflow. Due to a flaw in mkv::eventthreadt in VideoLAN VLC media player allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

7.8CVSS5.8AI score0.01941EPSS
Exploits0References8Affected Software1
Veracode
Veracode
added 2020/09/21 6:27 a.m.22 views

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through a double free issue when parsing MKV files caused by zlibdecompressextra in modules/demux/mkv/util.cpp...

9.8CVSS5.1AI score0.02392EPSS
Exploits0References9Affected Software1
NVD
NVD
added 2020/09/08 10:15 a.m.31 views

CVE-2020-11122

u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130...

5.5CVSS5.7AI score0.00407EPSS
Exploits0References2
Prion
Prion
added 2020/09/08 10:15 a.m.20 views

Null pointer dereference

u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130...

4.3CVSS5.8AI score0.00407EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/09/08 9:31 a.m.32 views

CVE-2020-11122

u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130...

5.7AI score0.00407EPSS
Exploits0References1
CVE
CVE
added 2020/09/08 9:31 a.m.55 views

CVE-2020-11122

CVE-2020-11122 corresponds to a Null Pointer dereference in Snapdragon video handling when decoding a crafted MKV data stream. Affected products include Snapdragon Auto, Snapdragon Consumer IoT, and Snapdragon Mobile (APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR21...

5.5CVSS5.7AI score0.00407EPSS
Exploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2020/08/27 12:0 a.m.45 views

Microsoft Windows hevcdecoder_store MKV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of M...

7.8CVSS5.5AI score0.123EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/07/24 12:0 a.m.31 views

VLC < 2.0.8 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 2.0.8. It is, therefore, affected by multiple vulnerabilities: - An exploitable denial of service vulnerability exists in plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7 and possibly other versions...

6.8CVSS6.9AI score0.03782EPSS
Exploits2References4
Zero Day Initiative
Zero Day Initiative
added 2020/07/07 12:0 a.m.27 views

Microsoft Windows hevcdecoder_store MKV File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of M...

7.8CVSS5.1AI score0.08977EPSS
Exploits0References1
Rows per page
Query Builder