10983 matches found
PT-2024-15022
Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description A flaw was found in FFmpeg's HLS demuxer, allowing bypassing of unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file...
PT-2024-15023
Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description A flaw was found in FFmpeg's TTY Demuxer, allowing possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists. Recommendations At the moment, there is no...
Privilege Escalation
ffmpeg is vulnerable to Privilege Escalation...
PT-2023-9358
Name of the Vulnerable Software and Affected Versions Ffmpeg version v.n6.1-3-g466799d4f5 Description The issue is related to a buffer overflow in the av malloc function, located in the libavutil/mem.c component of the Ffmpeg library. This buffer overflow is caused by copying without checking the...
ffmpeg:ffmpeg_BSF_H264_MP4TOANNEXB_fuzzer: Heap-buffer-overflow in h264_mp4toannexb_filter
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4966763443650560 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFH264MP4TOANNEXBfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 5 Crash Address:...
FFmpeg Buffer Overflow Vulnerability (CNVD-2024-31518)
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. FFmpeg suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A remote attacker can exploit the vulnerability to...
[SECURITY] Fedora 39 Update: gstreamer1-plugin-libav-1.22.7-1.fc39
GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...
Fedora: Security Advisory for gstreamer1-plugin-libav (FEDORA-2023-6a4aea6d13)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
Buffer overflow
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
UBUNTU-CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
CVE-2023-47470: Out-of-bounds Write
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
CVE-2023-47470
FFmpeg contains a Buffer Overflow in libavcodec/evc_ps.c ref_pic_list_struct that allows a remote attacker to perform an out-of-array write, potentially executing arbitrary code and causing DoS. A fix is committed (4565747056a11356210ed8edcecb920105e40b60); multiple advisories and CNVD/EUVD entri...
PT-2023-30463
Name of the Vulnerable Software and Affected Versions Ffmpeg versions before github commit 4565747056a11356210ed8edcecb920105e40b60 Description The issue allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the ref pic list struc...
Ubuntu: Security Advisory (USN-6449-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...