PT-2024-40630 · Git +1 · Libjpeg-Turbo

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash occurs in the decompress yuv.cc file. No...

DEBIAN-CVE-2024-38547

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: sshcss: Fix a null-pointer dereference in loadvideobinaries The allocation failure of mycs-yuvscalerbinary in loadvideobinaries is followed with a dereference of mycs-yuvscalerbinary after the following call chain...

UBUNTU-CVE-2024-38547

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: sshcss: Fix a null-pointer dereference in loadvideobinaries The allocation failure of mycs-yuvscalerbinary in loadvideobinaries is followed with a dereference of mycs-yuvscalerbinary after the following call chain...

CVE-2024-26667

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check for valid hwpp in dpuencoderhelperphyscleanup The commit 8b45a26f2ba9 "drm/msm/dpu: reserve cdm blocks for writeback in case of YUV output" introduced a smatch warning about another conditional block in...

CVE-2024-0023

In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-15300 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write due to an incorrect bounds check in the ConvertRGBToPlanarYUV function of Codec2BufferUtils.cpp...

UBUNTU-CVE-2023-40575

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalYUV444ToRGB8uP3AC4RBGRX function. This issue is likely down to insufficient data for the pSrc variable and results in crashe...

UBUNTU-CVE-2023-40188

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalLumaToYUV444 function. This Out-Of-Bounds Read occurs because processing is done on the in variable without checking if it...

The vulnerability of the XFree function in the /src/video/x11/SDL_x11yuv.c file of the Simple DirectMediaLayer library allows a hacker to cause a service failure.

The vulnerability of the XFree function in the /src/video/x11/SDLx11yuv.c file of the Simple DirectMediaLayer library is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

SUSE CVE-2011-3910

Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

SUSE CVE-2017-15033

ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the XFree function at /src/video/x11/SDLx11yuv.c. Note: This release of the project has been deprecated in favor of a 2.0 release, and a fix version will likely not be published. Remediation A fix was pushed into the...

DEBIAN-CVE-2022-34568

SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDLx11yuv.c...

CVE-2022-34568

SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDLx11yuv.c...

SDL 资源管理错误漏洞

github SDL is a software application. Simple Directmedia Layer A security vulnerability exists in SDL v1.2, which stems from a post-release reuse condition found via the XFree function in /src/video/x11/SDLx11yuv.c. The vulnerability was discovered by using the XFree function in...

Logic Flaw Vulnerability in 5MP Network Camera of Zhejiang YUV Technology Co.

Zhejiang YUVE Technology Co. Ltd. is a global provider of AIoT products, solutions and full-stack capabilities. A logic flaw vulnerability exists in the 5MP Network Camera of Zhejiang YUV Technology Co. Ltd, which can be exploited by an attacker to arbitrarily add users...

Command Execution Vulnerability in the Media Server of Zhejiang YUV Technology Co.

Founded in 2011, Zhejiang Yusi Technology Co., Ltd Yusi is a global solution provider for public safety and intelligent transportation. A command execution vulnerability exists in the media server of Zhejiang YUV Technology Co. Ltd, which can be exploited by an attacker to execute system commands...

Weak Password Vulnerability in Transcoding Server Configuration Management System of Zhejiang YUV Technology Co.

Founded in 2011, Zhejiang Yusi Technology Co., Ltd Yusi is a global solution provider for public safety and intelligent transportation. A weak password vulnerability exists in the configuration management system of the transcoding server of Zhejiang YUV Technology Co. Ltd, which can be exploited ...

Weak Password Vulnerability in Media Player of Zhejiang YUV Technology Co.

Founded in 2011, Zhejiang Yusi Technology Co., Ltd Yusi is a global solution provider for public safety and intelligent transportation. A weak password vulnerability exists in the media player of Zhejiang YUV Technology Co. An attacker can exploit the vulnerability by entering the default passwor...

Command Execution Vulnerability in Hard Disk Recorder of Zhejiang YUV Technology Co.

Founded in 2011, Zhejiang YUVE Technology Co., Ltd. is a solution provider for public safety and intelligent transportation. A command execution vulnerability exists in the hard disk recorders of Zhejiang YUV Technology Co. Ltd, which can be exploited by an attacker to execute system commands to...