Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer underflow in the Huffman decoding functionality (pvmp3_huffman_parsing.cpp) in OpenCORE 2.0 and earlier allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a crafted MP3 file that triggers heap corruption.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Android OpenCORE pvmp3_huffman_parsing.cpp MP3文件解析整数下溢漏洞
Vulnerability Description
OpenCORE是开放源码的多媒体解码子系统。 OpenCORE的pvmp3_huffman_parsing.cpp文件在Huffman解码期间存在整数下溢，导致在写入到堆分配缓冲区时出现错误的边界检查。如果用户受骗打开了恶意的mp3文件，就可以触发这个溢出，导致播放器崩溃或执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A