EUVD-2017-4696

Malware in sbrugna...

EUVD-2016-4840

Malware in sbrugna...

Out-of-bounds

In the ihevcdallocatestaticbufs and ihevcdcreate functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free. Both pscodecobj and pscreateop-sivdcreateopt.pvhandle point to the same memory and pscodecobj could be freed without clearing pscreateop-sivdcreateopt.pvhandle...

CVE-2017-13179

In the ihevcdallocatestaticbufs and ihevcdcreate functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free. Both pscodecobj and pscreateop-sivdcreateopt.pvhandle point to the same memory and pscodecobj could be freed without clearing pscreateop-sivdcreateopt.pvhandle...

CVE-2017-13179

In the ihevcdallocatestaticbufs and ihevcdcreate functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free. Both pscodecobj and pscreateop-sivdcreateopt.pvhandle point to the same memory and pscodecobj could be freed without clearing pscreateop-sivdcreateopt.pvhandle...

CVE-2017-13179

In the ihevcdallocatestaticbufs and ihevcdcreate functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free. Both pscodecobj and pscreateop-sivdcreateopt.pvhandle point to the same memory and pscodecobj could be freed without clearing pscreateop-sivdcreateopt.pvhandle...

CVE-2017-13179

CVE-2017-13179 describes an out-of-bounds write in SoftHEVC caused by a use-after-free in ihevcd_allocate_static_bufs and ihevcd_create. Both ps_codec_obj and ps_create_op->s_ivd_create_op_t.pv_handle reference the same memory, allowing the former to be freed without clearing pv_handle. This c...

CVE-2017-13179

In the ihevcdallocatestaticbufs and ihevcdcreate functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free. Both pscodecobj and pscreateop-sivdcreateopt.pvhandle point to the same memory and pscodecobj could be freed without clearing pscreateop-sivdcreateopt.pvhandle...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the codecs/hevcdec/SoftHEVC.cpp method in the libstagefright library of the Android operating system’s media server is related to improper error handling by the decoder. Exploiting this vulnerability allows a malicious actor to cause service interruptions device freezing and...