CVE-2016-8710

CVE-2016-8710 is a heap-write-out-of-bounds vulnerability in Libbpg’s BPG image decoding. The issue arises in the HEVC decoding path (restore_tqb_pixels) due to an integer underflow that allows out-of-bounds writes to heap memory, potentially enabling remote code execution when processing a craft...

CVE-2017-13135

CVE-2017-13135 : A NULL pointer dereference in VideoLAN x265 (used in libbpg 0.9.7 and other products) arises because CUData::initialize in common/cudata.cpp mishandles memory-allocation failure. The issue can cause a crash, treated as a denial of service in related advisories. Multiple sources (...