PT-2026-32219

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498498500 Crash type: Use-of-uninitialized-value Crash state: ne read block nestegg read packet fuzz.cc...

nestegg:fuzz: Use-of-uninitialized-value in ne_read_block

Project: https://github.com/kinetiknz/nestegg.git Detailed Report: https://oss-fuzz.com/testcase?key=6705140546732032 Project: nestegg Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzermsannestegg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

nestegg:fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5163129306677248 Project: nestegg Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasannestegg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

SUSE CVE-2015-4511

Heap-based buffer overflow in the nesteggtrackcodecdata function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video...

PT-2020-22441

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 8. The crash state involves several functions: ne find element, ne parse, an...

nestegg/fuzz: Global-buffer-overflow in ne_find_element

Project: https://github.com/kinetiknz/nestegg.git Detailed report: https://oss-fuzz.com/testcase?key=5729846619013120 Project: nestegg Fuzzer: libFuzzernesteggfuzz Fuzz target binary: fuzz Job Type: libfuzzerasannestegg Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address:...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability of the nestegg-trackcodecdata function in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted WebM video element header...

Mozilla Firefox and Firefox ESR 'nestegg_track_codec_data' heap buffer overflow vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability exists in Mozilla Firefox 'nesteggtrackcodecdata', which allows remote attackers to exploit specially crafted headers in WebM videos to crash an application or execute arbitrary code...

Mozilla: Buffer overflow while decoding WebM video (MFSA 2015-105)

Heap-based buffer overflow in the nesteggtrackcodecdata function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video...

PT-2015-2173

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Firefox ESR versions prior to 38.3 Description The issue is caused by a heap-based buffer overflow in the nestegg track codec data function. This can be exploited by a remote attacker using a specially...

Buffer overflow while decoding WebM video — Mozilla

Using the Address Sanitizer tool, security researcher Atte Kettunen discovered a buffer overflow in the nestegg library when decoding a WebM format video with maliciously formatted headers. This leads to a potentially exploitable crash...