CVE-2024-22860

FFmpeg before n6.1 is vulnerable to an integer overflow in the JPEG XL Animation decoder (jpegxl_anim_read_packet), enabling remote code execution. The issue affects FFmpeg’s handling of that component and is classified as critical by CVSS v3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The vulnerabi...

CVE-2024-22860: Integer Overflow or Wraparound

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxlanimreadpacket component in the JPEG XL Animation decoder...

CVE-2024-22861: Integer Overflow or Wraparound

Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service DoS via the avcodec/osq module...

CVE-2024-22860

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxlanimreadpacket component in the JPEG XL Animation decoder...

CVE-2024-22861

Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service DoS via the avcodec/osq module...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. An integer overflow vulnerability exists in FFmpeg versions prior to n6.1, which can be exploited to cause a denial of service via the avcodec/osq module...

CVE-2024-22860

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxlanimreadpacket component in the JPEG XL Animation decoder...

CVE-2024-22861

Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service DoS via the avcodec/osq module...

Malicious code in @shenmue_dsc/fluent-ffmpeg-multistream-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3d01a5cf41e8dc5e1f1997a92ef62717b51538e2d3a2c481a7127e22e291101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @shenmue_dsc/fluent-ffmpeg-multistream-ts

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

ffmpeg:ffmpeg_AV_CODEC_ID_VVC_fuzzer: Heap-buffer-overflow in ff_refstruct_replace

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4563412340244480 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

ffmpeg:ffmpeg_dem_WSD_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6510258168070144 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemWSDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

Code injection

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

PT-2024-13661 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: Jave2 version 3.3.1 Description: An issue was discovered in Jave2, allowing attackers to execute arbitrary code via the FFmpeg function. Recommendations: For Jave2 version 3.3.1, consider disabling the FFmpeg function until a patch is...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

CVE-2023-48909

The CVE-2023-48909 entry concerns Jave2 v3.3.1, where an issue in the FFmpeg function allows attackers to execute arbitrary code. Documents consistently identify the vulnerable component as the FFmpeg function within Jave2 and confirm a remote attack vector with NULL privileges and user interacti...

CVE-2023-48909: Undefined Security Weakness

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...