CVE-2022-3964: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument ysize leads to out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2022-3965

FFmpeg CVE-2022-3965 affects the QuickTime Graphics Video Encoder (libavcodec/smcenc.c: smc_encode_stream). Manipulating y_size causes an out-of-bounds read; the attack is described as remote. Patch reference: 13c13109759090b7f7182480d075e13b36ed8edd (VDB-213544) with a remediation recommendation...

CVE-2022-3964

CVE-2022-3964 affects FFmpeg: a flaw in the QuickTime RPZA Video Encoder, specifically in libavcodec/rpzaenc.c where manipulating the argument y_size causes an out‑of‑bounds read. The issue can be triggered remotely. The patch identified is 92f9b28ed84a77138105475beba16c146bdaf984. The vulnerabil...

FFmpeg buffer error vulnerability

FFmpeg, the FFmpeg team's complete solution for recording, converting, and streaming audio and video, suffers from a security vulnerability stemming from an unknown function in the file ibavcodec/rpzaenc.c of the QuickTime RPZA Video Encoder component, which could be exploited by an attacker to...

FFmpeg buffer error vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg, which originates from an unknown function in the file ibavcodec/rpzaenc.c of the QuickTime RPZA Video Encoder component, which can be exploited by...

CVE-2022-3965

A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smcencodestream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. The manipulation of the argument ysize leads to out-of-bounds read. The attack can be initiated...

CVE-2022-3964

A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument ysize leads to out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2022-3965

A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smcencodestream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. The manipulation of the argument ysize leads to out-of-bounds read. The attack can be initiated...

ffmpeg:ffmpeg_AV_CODEC_ID_TRUEHD_fuzzer: Index-out-of-bounds in output_data

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5149590118858752 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTRUEHDfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

PT-2022-7211

Name of the Vulnerable Software and Affected Versions ffmpeg affected versions not specified Description A problematic vulnerability has been found in ffmpeg, affecting the component QuickTime RPZA Video Encoder in the file libavcodec/rpzaenc.c. The manipulation of the argument y size leads to an...

ffmpeg -- multiple vulnerabilities

NVD reports: An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability. A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader...

PT-2022-7212

Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description The issue is related to the smc encode stream function in the libavcodec/smcenc.c component of the FFmpeg library. It involves an out-of-bounds read due to the manipulation of the y size...

Mageia: Security Advisory (MGASA-2022-0416)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0416 Updated ffmpeg packages fix security vulnerability

This update provides ffmpeg version 4.3.5, which fixes several security vulnerabilities and other bugs which were corrected upstream...

Updated ffmpeg packages fix security vulnerability

This update provides ffmpeg version 4.3.5, which fixes several security vulnerabilities and other bugs which were corrected upstream...

PT-2022-37582 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: ffmpeg versions prior to 4.3.5 Description: This issue concerns several security vulnerabilities and bugs in ffmpeg. The vulnerabilities were corrected upstream. Recommendations: For versions prior to 4.3.5, update to version 4.3.5 to resolve...

Debian: Security Advisory (DLA-3178-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3178-1] ffmpeg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3178-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler November 04, 2022 https://wiki.debian.org/LTS -...

DLA-3178-1 ffmpeg - security update

Bulletin has no description...

Debian: Security Advisory (DSA-5268-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...