qtwebengine-opensource-src vulnerabilities (Ubuntu)
81 vulnerabilities.
qtwebengine-opensource-srcUbuntucpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and...7.5 Highqtwebengine-opensource-srcUbuntuAuth Bypass in Google's Closure-Library6.5 Mediumqtwebengine-opensource-srcUbuntuopj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap...8.8 Highqtwebengine-opensource-srcUbuntuOpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in...7.5 Highqtwebengine-opensource-srcUbuntutif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has...8.8 Highqtwebengine-opensource-srcUbuntuHunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.6.5 Mediumqtwebengine-opensource-srcUbuntuA stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt...6.5 Mediumqtwebengine-opensource-srcUbuntuIn Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a...6.5 Mediumqtwebengine-opensource-srcUbuntuOpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.8.8 Highqtwebengine-opensource-srcUbuntuIn ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing...8.8 Highqtwebengine-opensource-srcUbuntuIn OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1...5.5 Mediumqtwebengine-opensource-srcUbuntuAn improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function...8.8 Highqtwebengine-opensource-srcUbuntuOut-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl,...6.5 Mediumqtwebengine-opensource-srcUbuntuDivision-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in...6.5 Mediumqtwebengine-opensource-srcUbuntuSQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the...9.8 Criticalqtwebengine-opensource-srcUbuntuIn libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster...7.5 Highqtwebengine-opensource-srcUbuntuAn Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff...6.5 Mediumqtwebengine-opensource-srcUbuntuThere exists a NULL pointer dereference in ff_vc1_parse_frame_header_adv in vc1.c in Libav 12.3,...6.5 Mediumqtwebengine-opensource-srcUbuntuThere exists a heap-based buffer overflow in vc1_decode_i_block_adv in vc1_block.c in Libav 12.3,...6.5 Mediumqtwebengine-opensource-srcUbuntuThere exists a heap-based buffer over-read in ff_vc1_pred_dc in vc1_block.c in Libav 12.3, which...6.5 Mediumqtwebengine-opensource-srcUbuntuThere exists a heap-based buffer overflow in vc1_decode_p_mb_intfi in vc1_block.c in Libav 12.3,...6.5 Mediumqtwebengine-opensource-srcUbuntuFFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access...6.5 Mediumqtwebengine-opensource-srcUbuntuFFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow...8.8 Highqtwebengine-opensource-srcUbuntuFFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free...6.5 Mediumqtwebengine-opensource-srcUbuntuFFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop...6.5 Mediumqtwebengine-opensource-srcUbuntuFFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array...9.8 Criticalqtwebengine-opensource-srcUbuntuThe gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly...6.5 Mediumqtwebengine-opensource-srcUbuntuThe av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running...2.6 Lowqtwebengine-opensource-srcUbuntuThe prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers...4.3 Mediumqtwebengine-opensource-srcUbuntuThe mov_text_decode_frame function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows...5.0 Mediumqtwebengine-opensource-srcUbuntuThe ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows...4.3 Medium