CVE-2022-30193

CVE-2022-30193 affects the AV1 Video Extension on Windows. The root cause is insufficient input validation in the AV1 Video Extension codec, enabling arbitrary code execution when processing crafted AV1 content. Impact per sources includes remote/local code execution with high confidentiality, in...

CVE-2022-30167

CVE-2022-30167 refers to an AV1 Video Extension Remote Code Execution vulnerability. The AV1 Video Extension is listed among affected Microsoft Windows components; the root cause is described in a PT-2022-3127 entry as insufficient input validation in the AV1 Video Extension codec. Exploitation c...

CVE-2023-29341

CVE-2023-29341 affects the AV1 Video Extension on Windows. The issue is a local RCE due to insufficient input validation in the AV1 codec, exploitable when a user opens a specially crafted AV1 file. Local attack requires user interaction; impact is arbitrary code execution on the affected machine...

CVE-2022-38019

CVE-2022-38019 affects the Windows AV1 Video Extension. The vulnerability stems from insufficient input validation in the AV1 codec, enabling arbitrary code execution (RCE) with likely local access and user interaction requirements. Public exploits exist and malware/public tooling have targeted t...

CVE-2023-29340

CVE-2023-29340 maps to a Windows AV1 Video Extension RCE. The AV1 Video Extension codec reportedly has insufficient input validation, enabling remote code execution when processing crafted files. Affected software is the Windows AV1 Video Extension (across multiple Windows versions/editions). The...

CVE-2020-17105

CVE-2020-17105 is an AV1 Video Extension Remote Code Execution vulnerability affecting Windows with the AV1 Video Extension component. Connected sources confirm a remote, network-exploitable flaw (no user interaction) that could allow arbitrary code execution and high/critical CVSS assessments ac...