SUSE CVE-2019-13136

ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c...

SUSE CVE-2019-14442

In mpc8readheader in libavformat/mpc8.c in Libav 12.3, an input file can result in an avioseek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file...

SUSE CVE-2019-14535

A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file...

SUSE CVE-2019-14778

The mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free...

seek-fun.com.tw Cross Site Scripting vulnerability OBB-3092552

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-25657

Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25657

Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25657

Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

PT-2022-17438 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: A memory corruption issue occurs due to a buffer overflow when processing an invalid MKV clip with an invalid seek header. This issue affects various Qualcomm Snapdragon product...

OSV-2022-501 UNKNOWN WRITE in grk::TileLengthMarkers::seek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48224 Crash type: UNKNOWN WRITE Crash state: grk::TileLengthMarkers::seek grk::CodeStreamDecompress::skipNonScheduledTLM grk::CodeStreamDecompress::parseTileParts...

Rust acc_reader crate has an unspecified vulnerability

Rust accreader crate is a structure that provides an AccReader that wraps an arbitrary instance of std::io::Read and provides an implementation of std::io::Seek for it. memory location. No details of the vulnerability are currently available...

Unspecified vulnerability exists in Rust acc_reader crate (CNVD-2022-04013)

Rust accreader crate is a structure that provides an AccReader that wraps an arbitrary instance of std::io::Read and provides an implementation of std::io::Seek for it. Readupto can read data from an uninitialized memory location. No details of the vulnerability are currently available...

Rust acc_reader crate 安全漏洞

Rust accreader crate is a structure that provides an AccReader that wraps an arbitrary instance of std::io::Read and provides an implementation of std::io::Seek for it. memory location. No details of the vulnerability are currently available...

NewStart CGSL CORE 5.04 / MAIN 5.04 : freerdp Multiple Vulnerabilities (NS-SA-2021-0047)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has freerdp packages installed that are affected by multiple vulnerabilities: - In FreeRDP greater than 1.2 and before 2.0.0, a double free in updatereadcachebitmapv3order crashes the client application if corrupted data from a...

freerdp: out of bounds seek in update_read_synchronize function could lead out of bounds read

In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in updatereadsynchronize that could lead to a later out-of-bounds read...

Exploit for CVE-2015-6606

This is a simple exploit for verification of CVE-2015-6606, a code injection vulnerability in the SEEK smartcard service versions 3.1.0 and below. The exploit allows specially crafted Android application packages to inject arbitrary code into the execution context of the smartcard system service,...

OSV-2020-1006 Use-of-uninitialized-value in decimate_dsd_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19928 Crash type: Use-of-uninitialized-value Crash state: decimatedsdrun WavpackUnpackSamples WavpackSeekSample64...

EulerOS 2.0 SP2 : freerdp (EulerOS-SA-2020-1678)

According to the version of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in updatereadsynchronize that could lead to a later out-of-bounds...

CVE-2020-11046

In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in updatereadsynchronize that could lead to a later out-of-bounds read...

DEBIAN-CVE-2020-11046

In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in updatereadsynchronize that could lead to a later out-of-bounds read...