This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Detail
Vendor Libbpg Project First view 2016-07-15
Product Libbpg Last view 2018-08-22
Version 0.9.7 Type Application
Update *  
Edition *  
Language *  
Sofware Edition *  
Target Software *  
Target Hardware *  
Other *  
 
CPE Product cpe:2.3:a:libbpg_project:libbpg

Activity : Overall

Related : CVE

  Date Alert Description
6.5 2018-08-22 CVE-2017-2575

A vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due to missing check of the return value of function malloc in the BPG encoder. This vulnerability appeared while converting a malicious JPEG file to BPG.

8.8 2017-11-15 CVE-2017-14034

The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact.

8.8 2017-11-15 CVE-2017-13136

The image_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference.

7.8 2017-11-15 CVE-2017-13135

A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure.

8.8 2017-09-27 CVE-2017-14796

The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (integer underflow and application crash) or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copy_CTB_to_hv in hevc_filter.c in libavcodec in FFmpeg and sao_filter_CTB in hevc_filter.c in libavcodec in FFmpeg.

8.8 2017-09-27 CVE-2017-14795

The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with hls_pcm_sample in hevc.c in libavcodec in FFmpeg and put_pcm_var in hevcdsp_template.c in libavcodec in FFmpeg.

8.8 2017-09-25 CVE-2017-14734

The build_msps function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted BPG file, related to hevc_decode_init1.

7.8 2017-01-26 CVE-2016-8710

An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability causing an out of bounds heap write leading to remote code execution. This vulnerability can be triggered via attempting to decode a crafted BPG image using Libbpg.

8.8 2016-07-15 CVE-2016-5637

The restore_tqb_pixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted BPG image, related to a "type confusion" issue.

CWE : Common Weakness Enumeration

%idName
22% (2) CWE-476 NULL Pointer Dereference
22% (2) CWE-125 Out-of-bounds Read
22% (2) CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer
11% (1) CWE-787 Out-of-bounds Write
11% (1) CWE-191 Integer Underflow (Wrap or Wraparound)
11% (1) CWE-190 Integer Overflow or Wraparound

Snort® IPS/IDS

Date Description
2017-01-18 libBPG restore_tqb_pixel out of bounds write attempt
RuleID : 41311 - Type : FILE-IMAGE - Revision : 3
2017-01-18 libBPG restore_tqb_pixel out of bounds write attempt
RuleID : 41310 - Type : FILE-IMAGE - Revision : 4