10983 matches found
ffmpeg:ffmpeg_AV_CODEC_ID_VP4_fuzzer: Crash in vp3_decode_frame
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6291788159385600 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVP4fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000104c27348...
PT-2024-10419
Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1 Description The issue is related to an integer overflow in the libavformat/westwood vqa.c component of the FFmpeg library. This can be exploited by a remote attacker using a specially crafted VQA file, potentially leading ...
PT-2024-10418
Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1 Description The issue is related to an integer overflow in the FFmpeg CAF decoder. This could potentially allow an attacker to cause a denial of service. Recommendations For version 6.1.1, consider updating to a newer...
PT-2025-2441
Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1.1 Description: The issue is a double-free vulnerability in the fftools/ffmpeg mux init.c component of FFmpeg, specifically within the new stream audio function. This vulnerability occurs in the audio processing component o...
MGASA-2024-0083 Updated ffmpeg packages fix security vulnerability
Out of array access in avformat/rtsp. CVE-2023-47342...
Updated ffmpeg packages fix security vulnerability
Out of array access in avformat/rtsp. CVE-2023-47342...
ffmpeg:ffmpeg_dem_MOV_fuzzer: Heap-buffer-overflow in mov_read_ispe
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4996530429820928 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemMOVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6030000003f0 Crash...
openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10086-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for ffmpeg (SUSE-SU-2023:0007-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for ffmpeg (SUSE-SU-2023:0008-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for ffmpeg (SUSE-SU-2023:0172-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for ffmpeg (SUSE-SU-2023:3818-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-10425
Name of the Vulnerable Software and Affected Versions FFmpeg version n6.1.1 Description The issue is related to a heap use-after-free in the av hwframe ctx init function. This could allow a remote attacker to impact data integrity. Recommendations For FFmpeg version n6.1.1, consider disabling the...
SUSE CVE-2023-6601
A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions...
SUSE CVE-2023-6602
A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists...
SUSE CVE-2023-6603
A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...
SUSE CVE-2023-6605
A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs...
SUSE CVE-2023-6604
A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...
ffmpeg:ffmpeg_dem_MOV_fuzzer: Heap-buffer-overflow in av_freep
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6517723242758144 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMOVfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...
ffmpeg:ffmpeg_dem_AIFF_fuzzer: Heap-buffer-overflow in av_channel_layout_copy
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4920720268263424 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemAIFFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6090000000e0 Crash...