28
edits
Changes
eShop (trailerhax) →System applications
Line 357:
Line 357:
| June/July 2016
| June/July 2016
| [[User:nedwill|nedwill]]
| [[User:nedwill|nedwill]]
+|-
+| [[EShop]]
+| When creating an audio decoder object for the moflex movie player, if the audio codec is PCM16, the application uses an uninitialized value as a pointer. One can spray the heap to get control of that pointer and achieve ROP.
+| None
+| [[11.14.0-46]]
+| 2020
+| [[User:Nba_Yoh|MrNbaYoh]]
|}
|}