FFmpeg-SDK command injection vulnerability

ffmpeg-sdk is a ffmpeg wrapper for nodejs by the individual developer Shajan Jacob in India. A security vulnerability exists in ffmpeg-sdk, which stems from the vulnerability of index.js to command injection attacks...

PT-2022-8891

Name of the Vulnerable Software and Affected Versions ffmpeg-sdk versions all versions Description A command injection issue affects the package. The injection point is located in line 9 in index.js. Recommendations For all versions, consider disabling or restricting access to the vulnerable code...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in ljpeg_decode_rgb_scan

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5208501080686592 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x61700000030...

PT-2022-6681 · FFmpeg +6 · Ffmpeg +6

Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: A null pointer dereference issue was discovered in the decode main header function of the libavformat/nutdec.c file. The flaw occurs because the function lacks a check of the return value of...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in sao_filter_CTB

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5424984922652672 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in sao_filter_CTB

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4708590276968448 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

FFmpeg decode_slice_header() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg decodesliceheader function, which can be exploited by an attacker to cause a denial of service attack...

FFmpeg Debian Code Execution

The vulnerability of the FFmpeg multimedia library in the Debian GNU/Linux operating system is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to trigger an octath in the service or execute arbitrary code...

FFmpeg rpza_decode_stream() Code Execution Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A code execution vulnerability exists in FFmpeg rpzadecodestream, which can be exploited by an attacker to trigger an out-of-bounds read memory access and execute arbitrary code on the syst...

FFmpeg HEVC video decoder denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in FFmpeg HEVC video decoder, which can be exploited by attackers to cause a denial of service attack...

FFmpeg ff_init_buffer_info() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg ffinitbufferinfo function, which can be exploited by an attacker to cause a denial of service attack...

FFmpeg read_var_block_data() function buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A buffer overflow vulnerability exists in the FFmpeg readvarblockdata function, which can be exploited by an attacker to trigger an out-of-bounds read memory access...

FFmpeg shorten_decode_frame() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg shortendecodeframe function, which can be exploited by an attacker to cause a denial of service attack...

FFmpeg msrle_decode_frame() function denial-of-service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg msrledecodeframe function, which can be exploited by an attacker to cause a denial of service attack...

ffmpeg:ffmpeg_AV_CODEC_ID_LAGARITH_fuzzer: Heap-buffer-overflow in lag_decode_arith_plane

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4764457825337344 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDLAGARITHfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 9 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBVPX_VP9_fuzzer: Heap-buffer-overflow in vp9_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5437551174877184 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDLIBVPXVP9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_THEORA_fuzzer: Crash in ff_put_pixels8_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4950744006000640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTHEORAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001049069e...

ffmpeg:ffmpeg_AV_CODEC_ID_QDRAW_fuzzer: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4608329791438848 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDQDRAWfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in ff_simple_idct_put_int16_8bit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6520660484030464 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in dng_decode_jpeg

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6149705769287680 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x6290000092...