FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n6.1.1, which can be exploited by attackers to cause a denial of service DoS condition...

CVE-2024-36616

An integer overflow in the component /libavformat/westwoodvqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n6.1.1, which can be exploited by attackers to cause a denial of service DoS...

CVE-2024-35366

FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parseoptions function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds...

CVE-2024-35366

FFmpeg n6.1.1 is susceptible to an integer overflow vulnerability within the libavformat module. The root cause is located in the parse_options function of sbgdec.c, where the software fails to adequately validate inputs, allowing for the acceptance of negative duration values without proper boun...

CVE-2024-35368

FFmpeg n7.0 is affected by a Double Free via the rkmppretrieveframe function within libavcodec/rkmppdec.c...

CVE-2024-36618

FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service DoS condition...

CVE-2024-36618: Integer Overflow or Wraparound

FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service DoS condition...

CVE-2024-36616: Integer Overflow or Wraparound

An integer overflow in the component /libavformat/westwoodvqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. An integer overflow vulnerability exists in FFmpeg parseoptions, which can be exploited by an attacker to submit a special file and trick the user into parsing it, which can crash the...

CVE-2024-36618

FFmpeg n6.1.1 contains an integer overflow vulnerability within the AVI demuxer of the libavformat library. This flaw can potentially lead to a denial-of-service (DoS) condition. Affected versions include various distributions such as openSUSE Leap 16.0 , SLES 15 , and SLED 15 . Remediation is av...

CVE-2024-35368

FFmpeg n7.0 is affected by a Double Free vulnerability located in the rkmpp_retrieve_frame function within the libavcodec/rkmppdec.c file. This flaw can lead to significant consequences, as indicated by a CRITICAL severity rating with a CVSS score of 9.8 , potentially impacting confidentiality, i...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n6.1.1, which stems from the presence of an integer overflow that could allow an attacker to trigger a denial of service in an application...

CVE-2024-35367

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dspaltivec.c, static const vecs8 hsubpelfiltersouter...

aeolis (3.1.0rc1), agixt (>=1.1.73b0, <=1.3.155) +201 more potentially affected by CVE-2024-36616 via ffmpeg (>=1.2.1, <=1.4.0)

ffmpeg PYPI version =1.2.1, =1.1.73b0, =0.0.0, =0.0.1, =1.0.0, =0.9.2, =0.3.0, =0.1.3, =0.1.0, =0.1.1, =0.2.0, =0.1.0, =0.2.8.post2 - auralis-vfs 1.1.0 and more Source cves: CVE-2024-36616 Source advisory: MEND:CVE-2024-36616...

CVE-2024-35369

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in...

CVE-2024-36619

FFmpeg n6.1.1 contains a vulnerability in the WAVARC decoder of the libavcodec library . The issue is caused by an integer overflow that occurs when handling specific block types, which can be exploited by a remote attacker to trigger a denial-of-service (DoS) condition. This vulnerability specif...

CVE-2024-36619: Integer Overflow or Wraparound

FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service DoS condition...

CVE-2024-35369

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n7.0, which stems from the presence of a double release...