92 matches found
CVE-2026-0006-openapv-poc
CVE-2026-0006: Desbordamiento de búfer en el montón en libopenapv códec APV de Android Análisis del parche y reproducción por Mobile Hacking Lab CVSS 9.8 Crítico | Explotado activamente en la naturaleza | Parcheado en marzo de 2026 Nota: No descubrimos esta vulnerabilidad. Todo el crédito por...
cve-2015-1538-1
Se incluye un script de Python que genera un MP4 que explota la vulnerabilidad ‘stsc’, también conocida como CVE-2015-1538 1. Esta es una de las vulnerabilidades más críticas que reporté en la biblioteca Stagefright. El resultado esperado del exploit es una shell inversa como el usuario media. Co...
CVE-2016-3861
CVE-2016-3861 Una versión extendida del exploit libutils de Mark Brand, del artículo del blog de Google Project Zero: https://googleprojectzero.blogspot.com/2016/09/return-to-libstagefright-exploiting.html Principales diferencias: todos los archivos mp4 utilizados para la explotación se generan...
Amazon Linux 2023 : gstreamer1-plugins-good, gstreamer1-plugins-good-gtk (ALAS2023-2026-1787)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1787 advisory. An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxparsetrak function does not sufficiently validate atom data befor...
Amazon Linux 2 : gstreamer1-plugins-good, --advisory ALAS2-2026-3328 (ALAS-2026-3328)
The version of gstreamer1-plugins-good installed on the remote host is prior to 1.18.4-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3328 advisory. An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the...
Medium: gstreamer1-plugins-good
Issue Overview: An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxparsetrak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by...
CVE-2026-46469
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxparsetrak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero...
CVE-2026-46470
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero...
UBUNTU-CVE-2026-46469
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxparsetrak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero...
CVE-2026-46469
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxparsetrak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero...
BIT-JAVA-2025-47219
In GStreamer through 1.26.1, the isomp4 plugin's qtdemuxparsetrak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure...
PT-2026-38046
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux parse trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure...
PT-2026-37839
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux parse trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure...
[SECURITY] [DLA 4419-1] gst-plugins-good1.0 security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-4419-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 25, 2025 https://wiki.debian.org/LTS -...
(0Day) Microsoft Windows MP4 File Parsing Null Pointer Dereference Denial-of-Service Vulnerability
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
Astra Linux – Vulnerability in gst-plugins-good1.0
In GStreamer through 1.26.1, the isomp4 plugin’s qtdemuxparsetrak function may read past the end of a heap buffer while parsing an MP4 file, potentially leading to information disclosure...
EUVD-2020-24931
Malware in sbrugna...
EUVD-2020-24932
Malware in sbrugna...