783 matches found
Integer overflow
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...
UBUNTU-CVE-2023-47359
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...
CVE-2023-47359
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...
CVE-2023-47359
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...
CVE-2023-47360
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...
VideoLAN VLC media player security vulnerability
VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. It supports the playback of a wide range of media files, CD-ROMs, etc., audio and video formats WMV, MP3, etc., and more. A security vulnerability exists in...
CVE-2023-47360
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...
CVE-2023-47360
CVE-2023-47360 affects VLC media player prior to 3.0.20. The vulnerability is an Integer underflow that leads to an incorrect packet length. Multiple advisories (Ubuntu USN-6783-1, Nessus plugins for VLC
CVE-2023-47359
CVE-2023-47359 affects VLC media player prior to 3.0.20. An incorrect offset read in GetPacket can cause a heap-based buffer overflow and memory corruption. Public advisories (including OpenVAS/Nessus listings and Ubuntu USN) flag potential crash and, in some sources, remote code execution possib...
VideoLAN VLC media player security vulnerability
VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. It supports the playback of a wide range of media files, CD-ROMs, etc., audio and video formats WMV, MP3, etc., and more. A security vulnerability exists in...
CVE-2023-47360
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...
CVE-2023-47359
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...
PT-2023-7038 · Videolan +5 · Vlc +5
Name of the Vulnerable Software and Affected Versions: Videolan VLC versions prior to 3.0.20 Description: The issue is related to an integer underflow in the GetPacket function of the VLC media player, which can lead to an incorrect packet length. This can potentially allow a remote attacker to...
PT-2023-7034 · Videolan +5 · Vlc +5
Name of the Vulnerable Software and Affected Versions: Videolan VLC versions prior to 3.0.20 Description: The issue is related to a Heap-Based Buffer Overflow in the GetPacket function, which can lead to memory corruption. This can be exploited by a remote attacker to damage memory. The estimated...
Ubuntu 16.04 ESM : VideoLAN x265 vulnerability (USN-4809-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4809-1 advisory. It was discovered that VideoLAN x265 mishandled certain memory-allocation inputs. An attacker could use this vulnerability to cause a denial of service crash...
GLSA-202310-05 : dav1d: Denial of Service
The remote host is affected by the vulnerability described in GLSA-202310-05 dav1d: Denial of Service - VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit. CVE-2023-32570 Note that Nessus has not tested for this iss...
Fedora 38 : dav1d (2023-9ea5d6e289)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9ea5d6e289 advisory. Update to version 1.2.1. This version includes a fix for CVE-2023-32570 race condition that can lead to an application crash. Tenable has extracted...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : dav1d (SUSE-SU-2023:2618-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2618-1 advisory. - CVE-2023-32570: Fixed possible crash when decoding a frame bsc1211262. Tenable has extracted the...
