UBUNTU-CVE-2020-22031

A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vfw3fdif.c in filter16complexlow, which might lead to memory corruption and other potential consequences...

DEBIAN-CVE-2020-22026

Buffer Overflow vulnerability exists in FFmpeg 4.2 in the configinput function at libavfilter/aftremolo.c, which could let a remote malicious user cause a Denial of Service...

FFmpeg 缓冲区错误漏洞

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in the convolutiony10bit function in libavfilter/vfvmafmotion.c in FFmpeg version 4.2. An attacker can...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg Ffmpeg team. A denial of service vulnerability exists in FFmpeg version 4.2, which stems from a resource management error in fftools/cmdutils.c, and can be exploited by an attacker to cause a...

FFmpeg 代码问题漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg Ffmpeg team. A null pointer dereference vulnerability exists in libavformat/aviobuf.c in FFmpeg version 4.2. An attacker could exploit this vulnerability to cause a denial of service...

Debian DLA-2663-1 : libimage-exiftool-perl security update

A vulnerability was discovered in libimage-exiftool-perl, a library and program to read and write meta information in multimedia files, which may result in execution of arbitrary code if a malformed DjVu file is processed. For Debian 9 stretch, this problem has been fixed in version 10.40-1+deb9u...

Debian: Security Advisory (DLA-2663-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2663-1] libimage-exiftool-perl security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2663-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 16, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

LIVE555 Streaming Media has an unspecified vulnerability

LIVE555 Streaming Media is an application from LIVE555 USA, Inc. a standards-based RTP/RTCP/RTSP/SIP multimedia streaming source code library for embedded and/or low-cost streaming applications.A security vulnerability exists in versions prior to LIVE555 Streaming Media 2021.3.16, which stems fro...

Command Execution Vulnerability in Multimedia Dispatch System of Beijing Jieshirui Technology Co.

Ltd. is a high-tech enterprise founded by overseas returned high-tech talents. A command execution vulnerability exists in the multimedia scheduling system of Beijing Jieshirui Technology Co., Ltd, which can be exploited by attackers to execute arbitrary commands...

Tagstoo 2.0.1 - Stored XSS to Remote Command Execution Vulnerability

Exploit Title: Tagstoo 2.0.1 - Stored XSS to RCE Exploit Author: TaurusOmar CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Risk: High 8.8 Vendor Homepage: https://tagstoo.sourceforge.io/ Version: v2.0.1 Tested on: Windows, Linux, MacOs Software Description: Software to tag folders and files, with...

Debian DSA-4910-1 : libimage-exiftool-perl - security update

A vulnerability was discovered in libimage-exiftool-perl, a library and program to read and write meta information in multimedia files, which may result in execution of arbitrary code if a malformed DjVu file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

[SECURITY] [DSA 4910-1] libimage-exiftool-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4910-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 02, 2021 https://www.debian.org/security/faq -...

GPAC Integer Overflow Vulnerability (CNVD-2022-04965)

GPAC is an open source multimedia framework. GPAC 1.0.1 is vulnerable to integer overflow, which can be exploited by attackers to cause assignment failures...

Adobe Animate has a binary vulnerability (CNVD-2021-32449)

Adobe Animate is a multimedia and computer animation software developed by Adobe. Adobe Animate suffers from a binary vulnerability that can be exploited by attackers to cause a denial of service...

GPAC Invalid Pointer Dereference Vulnerability (CNVD-2021-30586)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in the SetupWriters function in isomedia/isomstore.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

GPAC Invalid Pointer Dereference Vulnerability (CNVD-2021-30587)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in the gfhintertrackfinalize function in mediatools/isomhinter.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

GPAC heap buffer overflow vulnerability (CNVD-2021-30198)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap buffer overflow vulnerability exists in the abstboxread function in boxcodeadobe.c in versions of GPAC prior to 1.0.1. No detailed vulnerability details are provided at this time...

GPAC heap buffer overflow vulnerability (CNVD-2021-30584)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap buffer overflow vulnerability exists in the gprtpbuilderdoavc function in ietf/rtppckmpeg4.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30199)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the nhmldumpsendheader function in writenhml.c in GPAC 20200801 and earlier. An attacker could exploit this vulnerability to cause a denial of service...