OSV-2023-769 Index-out-of-bounds in derive_spatial_luma_vector_prediction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61844 Crash type: Index-out-of-bounds Crash state: derivespatiallumavectorprediction filllumamotionvectorpredictors motionvectorsandrefindices...

PT-2023-35986 · Git +1 · Kimageformats

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to an index-out-of-bounds crash. Technical details about the crash include the functions derive spatial luma vector prediction, fill...

The vulnerability of the `derive_spatial_luma_vector_prediction` function in the `motion.cc` component of the H.265 Libde265 video encoder allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the derivespatiallumavectorprediction function in the motion.cc component of the H.265 Libde265 codec implementation is related to buffer overflow attacks. Exploiting this vulnerability could allow attackers to access confidential data, compromise its integrity, and even caus...

FFmpeg Input Validation Error Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 4.3.2, which originates from an integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c, which allows local attacker...

The vulnerability of motion controllers and motion control systems like SIMOTION allows a intruder to disclose the protected information.

The vulnerability of SIMOTION motion controllers and motion control systems lies in the lack of protection for mission-critical data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2023-34597

A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34597

A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34597: Undefined Security Weakness

A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34597

CVE-2023-34597 affects Fibaro Motion Sensor firmware version 3.4. The vulnerability allows an attacker to cause a Denial of Service via a crafted Z-Wave message. Documented impact: availability impact high (DoS) with attack vector Adjacent and no privileges/UI required. The NVD/NVD-derived metric...

CVE-2023-34597

A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

PT-2023-24938 · Fibaro · Fibaro Motion Sensor

Name of the Vulnerable Software and Affected Versions: Fibaro Motion Sensor version 3.4 Description: A Denial of Service DoS issue exists, allowing attackers to cause a disruption via a crafted Z-Wave message. Recommendations: For Fibaro Motion Sensor version 3.4, update the firmware to a version...

Fibaro Motion Sensor 安全漏洞

Fibaro Motion Sensor is a wireless motion sensor from the Polish company Fibaro. A security vulnerability exists in Fibaro Motion Sensor version v3.4 that stems from allowing an attacker to cause a denial of service DoS via a crafted Z-Wave message...

motionninja.ca Cross Site Scripting vulnerability OBB-3345558

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

motion.co.at Cross Site Scripting vulnerability OBB-3306474

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: IBM Security Verify Governance is vulnerable to denial of service (CVE-2022-24839)

Summary IBM Security Verify Governance is vulnerable to a denial of service vulnerability within the Sparkle Motion Nokogiri package. The issue was addressed by upgrading the vulnerable package. Vulnerability Details CVEID:CVE-2022-24839 DESCRIPTION: Sparkle Motion Nokogiri is vulnerable to a...

The vulnerability of the `derive_collocated_motion_vectors` function in the h.265 Libde265 codec implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the derivecollocatedmotionvectors function in the h.265 Libde265 implementation is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the mc_chroma function (motion.cc) in the h.265 Libde265 video codec implementation, which allows a hacker to cause a service failure.

The vulnerability of the mcchroma function in the h.265 Libde265 video codec implementation is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to cause service failure by using a specially created file...

The vulnerability of the ff_hevc_put_unweighted_pred_8_sse function (sse-motion.cc) in the h.265 Libde265 video codec implementation allows a hacker to cause a service failure.

The vulnerability of the ffhevcputunweightedpred8sse function sse-motion.cc in the h.265 Libde265 video codec implementation is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created input file...

The vulnerability of the `put_weighted_pred_8_fallback` function (fallback-motion.cc) in the implementation of the h.265 Libde265 video codec allows a perpetrator to trigger a service failure.

The vulnerability of the putweightedpred8fallback function in the fallback-motion.cc implementation of the h.265 Libde265 codec is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created input file...

The vulnerability of the put_unweighted_pred_16_fallback function (fallback-motion.cc) in the h.265 video codec implementation by libde265 allows a perpetrator to trigger a service failure.

The vulnerability of the putunweightedpred16fallback function in the fallback-motion.cc implementation of the h.265 video codec library libde265 is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a Denial-of-Service attack...