USN-6180-1: VLC media player vulnerabilities

It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were tricked into opening a crafted image file, a remote attacker could possibly use this issue to cause VLC to crash, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and...

ROS-20230620-01

Ffmpeg multimedia library vulnerability is related to NULL pointer dereferencing error in function decodemainheader in libavformat/nutdec.c. Exploitation of the vulnerability could allow an attacker, remotely, trick a victim into opening a specially crafted file and performing a denial-of-service...

UBUNTU-CVE-2023-3291

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

ROS-20230616-02

Vulnerability in libavcodec/pthreadframe.c component of FFmpeg multimedia library is related to memory usage after it is freed when processing worker threads with hwaccel decoder. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. A code issue vulnerability exists in GPAC versions prior to 2.2.2 that stems from a null pointer dereference...

The vulnerability of the multimedia player iTunes, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the multimedia player iTunes is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

[SECURITY] [DSA 5411-1] gpac security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5411-1 [email protected] https://www.debian.org/security/ Aron Xu May 26, 2023 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

CVE-2023-1696

The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability...

Design/Logic Flaw

The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability...

CVE-2023-1696

The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability...

CVE-2023-1696

The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability...

CVE-2023-1696

CVE-2023-1696 affects Huawei HarmonyOS multimedia video module. The issue is a data processing vulnerability in that module, with exploitation leading to availability impact. No detailed affected version list is provided in the connected documents; exploitation status is not specified. CVSSv3.1 i...

PT-2023-17179 · Unknown · Multimedia Video Module

Name of the Vulnerable Software and Affected Versions: Multimedia video module affected versions not specified Description: The issue is related to a vulnerability in the data processing of the multimedia video module. Successful exploitation of this vulnerability may affect availability...

The vulnerability of the IMA_ADPCMDecode() function in the audio component of the SDL_wave.c multimedia library allows a hacker to induce a service failure.

The vulnerability of the IMAADPCMDecode function in the audio component of the SDLwave.c multimedia library is related to integer overflow. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : WebKitGTK vulnerabilities (USN-6061-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6061-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious...

Debian DSA-5397-1 : wpewebkit - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5397 advisory. - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Exploit for Improper Encoding or Escaping of Output in F5 Nginx

This is a repository for Vulhub, a collection of vulnerable environments for testing and learning about web application security. The repository contains a variety of vulnerable environments, including web servers, databases, and applications, which can be used to test and demonstrate various typ...

Debian: Security Advisory (DSA-5394-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for ffmpeg (FEDORA-2023-1e24db98a6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: ffmpeg-5.0.3-1.fc36

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...