OESA-2023-1691 exempi security update

Exempi is an implementation of XMP. Version 2.x is based on Adobe XMP SDK and released under a BSD-style license like Adobe's. Security Fixes: XMP Toolkit version 2020.1 and earlier is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory...

SUSE CVE-2018-1999014

FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS. This attack appear to be exploitable via specially crafted MXF file which has to be provided as input. This vulnerability appears to have been...

CVE-2021-40732

XMP Toolkit version 2020.1 and earlier is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the current user. User interaction is required to exploit this vulnerability in th...

UBUNTU-CVE-2018-1999014

FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS. This attack appear to be exploitable via specially crafted MXF file which has to be provided as input. This vulnerability appears to have been...

DEBIAN-CVE-2018-1999014

FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS. This attack appear to be exploitable via specially crafted MXF file which has to be provided as input. This vulnerability appears to have been...

The vulnerability of the mxf_read_index_entry_array function (libavformat/mxfdec.c) in the multimedia library FFmpeg allows a attacker to consume computing resources and cause service denial.

The vulnerability of the mxfreadindexentryarray function libavformat/mxfdec.c in the multimedia library FFmpeg is related to resource management errors. Exploiting this vulnerability can allow an attacker to consume computational resources and cause service failures through the use of a specially...

CVE-2017-14170

In libavformat/mxfdec.c in FFmpeg 3.3.3 - 2.4, a DoS in mxfreadindexentryarray due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted MXF file, which claims a large "nbindexentries" field in the header but does not contain sufficient backing data, is provided, th...

CVE-2017-14170

In libavformat/mxfdec.c in FFmpeg 3.3.3 - 2.4, a DoS in mxfreadindexentryarray due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted MXF file, which claims a large "nbindexentries" field in the header but does not contain sufficient backing data, is provided, th...