10983 matches found
ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer: Heap-buffer-overflow in jpegNUMBER_decode_tile
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5142077915398144 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDJPEG2000fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...
ffmpeg:ffmpeg_AV_CODEC_ID_MPEG1VIDEO_fuzzer: Crash in ff_put_h264_chroma_mc4_ssse3
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4993004566609920 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMPEG1VIDEOfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000003c08 Crash...
ffmpeg:ffmpeg_DEMUXER_fuzzer: Crash in jpegxl_anim_probe
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6360142686584832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xf24e32ac Crash...
ffmpeg:ffmpeg_dem_JPEGXL_ANIM_fuzzer: Stack-buffer-overflow in ff_jpegxl_verify_codestream_header
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6584117345779712 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemJPEGXLANIMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7a3142e929...
FFmpeg Use-After-Free
The vulnerability of the libavcodec/pthreadframe.c component in the FFmpeg multimedia library is related to the use of memory after it is freed during the processing of working threads by the decoder hwaccel. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
USN-5958-1: FFmpeg vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that FFmpeg could be made to dereference a null pointer. An attacker could possibly use this to cause a denial of service via application crash. These issues only...
SUSE: Security Advisory (SUSE-SU-2023:2115-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2023:2108-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15: libavcodec-devel / libavcodec57 / libavcodec57-32bit / etc (SUSE-SU-2023:2115-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2115-1 advisory. - CVE-2019-13390: Fixed a potential crash when processing a crafted AVI stream bsc1140754. - CVE-2022-3341: Fixed a potential crash...
SUSE SLED15: ffmpeg / ffmpeg-private-devel / libavcodec-devel / libavcodec57 / etc (SUSE-SU-2023:2108-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2108-1 advisory. - CVE-2022-48434: Fixed use after free in libavcodec/pthreadframe.c bsc1209934. Tenable has extracted the...
SUSE-SU-2023:2115-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2019-13390: Fixed a potential crash when processing a crafted AVI stream bsc1140754. - CVE-2022-3341: Fixed a potential crash when processing a crafted NUT stream bsc1206778. - CVE-2022-48434: Fixed use after free in libavcodec/pthreadframe...
SUSE-SU-2023:2108-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2022-48434: Fixed use after free in libavcodec/pthreadframe.c bsc1209934...
SUSE SLED15: ffmpeg-4 / ffmpeg-4-libavcodec-devel / ffmpeg-4-libavdevice-devel / etc (SUSE-SU-2023:2087-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2087-1 advisory. This updates fixes the following issues for ffmpeg-4: Security fixes: - CVE-2022-48434: Fixed use after...
SUSE-SU-2023:2087-1 This update has recommended fixes for ffmpeg-4
This updates fixes the following issues for ffmpeg-4: Security fixes: - CVE-2022-48434: Fixed use after free in libavcodec/pthreadframe.c bsc1209934. Other fixes: - Add necessary subpackages to the Packagehub. bsc1206067...
ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Index-out-of-bounds in ff_hevc_slice_rpl
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5834725318328320 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...
Debian: Security Advisory (DSA-5394-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-5394-1 : ffmpeg - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5394 advisory. Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if...
[SECURITY] [DSA 5394-1] ffmpeg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5394-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 30, 2023 https://www.debian.org/security/faq -...
Use After Free
ffmpeg is vulnerable to Use After Free. vulnerability occurs in 'libavcodec/pthreadframe.c' due to stale hwaccel state in worker threads which allows an attacker to trigger use after free...