CVE-2014-125006: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function outputframe of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this...

FFmpeg buffer error vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg decodesliceheader function, which can be exploited by an attacker to trigger an out-of-bounds read memory access...

CVE-2014-125005: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodevolheader of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix...

FFmpeg security vulnerabilities

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A security vulnerability exists in FFmpeg version 2.0, which originates from a memory corruption via the decodeframe function in the libavcodec/ansi.c file...

PT-2022-7764

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A vulnerability has been found in FFmpeg, affecting the decode hextile function of the file libavcodec/vmnc.c. This issue leads to memory corruption and can be initiated remotely. Recommendations For FFmpeg versi...

CVE-2014-125008: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbisheader of the file libavformat/oggparsevorbis.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue...

USN-5167-1: FFmpeg vulnerabilities

It was discovered that FFmpeg did not properly verify certain input when processing video and audio files. An attacker could possibly use this to send specially crafted input to the application, force a division by zero, and cause a denial of service application crash. CVE-2020-20445,...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in avg_qpel16_mc01_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5745039940124672 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMPEG4fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7f28ab09b8...

ffmpeg:ffmpeg_AV_CODEC_ID_BINK_fuzzer: Heap-buffer-overflow in scale_block_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6194020855971840 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDBINKfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x6210000089...

ffmpeg:ffmpeg_IO_DEMUXER_fuzzer: Heap-buffer-overflow in mov_read_iloc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5706852010164224 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegIODEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60a000000200...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : FFmpeg vulnerabilities (USN-5472-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5472-1 advisory. It was discovered that FFmpeg would attempt to divide by zero when using Linear Predictive Coding LPC or AAC codecs. An attacker...

Ubuntu: Security Advisory (USN-5472-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5472-1: FFmpeg vulnerabilities

It was discovered that FFmpeg would attempt to divide by zero when using Linear Predictive Coding LPC or AAC codecs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 21.10. CVE-2020-20445, CVE-2020-20446...

USN-5472-1 ffmpeg vulnerabilities

It was discovered that FFmpeg would attempt to divide by zero when using Linear Predictive Coding LPC or AAC codecs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 21.10. CVE-2020-20445, CVE-2020-20446...

ffmpeg:ffmpeg_AV_CODEC_ID_CDGRAPHICS_fuzzer: Heap-buffer-overflow in cdg_scroll

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5690504626438144 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDCDGRAPHICSfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Index-out-of-bounds in sao_band_filter_9

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5719393113341952 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_AMV_fuzzer: Heap-buffer-overflow in ff_jpegls_decode_picture

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5646305956855808 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAMVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x620000000f80...

ffmpeg:ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer: Index-out-of-bounds in decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4817404984688640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMALOSSLESSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

Out-of-bounds Read

ffmpeg is vulnerable to out of bounds read. An out-of-bounds read vulnerability exists in longtermfilter function in g729postfilter.c during computation of the denominator of pseudo-normalized correlation R'0, that could result in disclosure of information...

Mageia: Security Advisory (MGASA-2022-0199)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...