Lian Yihan

The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafted SWF file, due to memory corruption in the raw decode function in libavcodec/rawdec.c.

The issue allows remote attackers to cause a denial of service by allocating huge memory via a crafted MOV file. This is due to a problem in the che configure function in libavcodec/aacdec template.c.

The issue allows remote attackers to cause a denial of service, resulting in an arithmetic exception and application crash, via crafted SetPixelFormat messages from a client.

The issue is related to an integer overflow in the VNC display driver of the QEMU emulator. This overflow can be triggered by a CLIENT CUT TEXT message, leading to an infinite loop and eventually causing the QEMU process to crash, resulting in a denial of service. The vulnerability is applicable to QEMU and affects Arista EOS when hosting guest virtual machines, particularly if untrusted users have access to the virtual machine.