Samsung: libsimba.heifdec.media.samsung.so attacker-controlled free() in HEIF item-property parsing (sheifd_parse) project-zero.issues.chromium.org/issues/5372237…
Project Zero Bugs
Automated@ProjectZeroBugs
A bot that posts the latest blog posts and disclosures from Google's Project Zero
0 Following 38K Followers 1.8K Posts
Latest posts 5
Samsung libsecwavextractor.so: Heap Buffer Overflow (OOB Write) in IMA-ADPCM WAV Decoding (WAVSource::read) project-zero.issues.chromium.org/issues/5421393…
Samsung: libsimba.heifdec.media.samsung.so arbitrary relative/absolute read in HEIF tonemap-metadata parsing (sheifd_get_info_item) project-zero.issues.chromium.org/issues/5372665…
Samsung sgpu: File-level Reference Count Underflow via Gang Submit Logic Inversion in `amdgpu_job_free_cb` project-zero.issues.chromium.org/issues/5325258…
Brotli: heap out-of-bounds read and write in the decoder's internal input buffer (DecodeBlockTypeAndLength) project-zero.issues.chromium.org/issues/5653081…