libavformat/mpegenc.c Heap Buffer Overflow DoS

The vulnerability of the mpegmuxwritepacket function in the libavformat/mpegenc.c component of the FFmpeg multimedia library relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a specially created AVI file...

ffmpeg:ffmpeg_AV_CODEC_ID_VP3_fuzzer: Crash in ff_emu_edge_vfix12_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4801592127258624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVP3fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000105670d17...

FFmpeg filter_frame Heap Buffer Overflow DoS

The vulnerability of the filterframe function in the libavfilter/vflenscorrection.c file of the FFmpeg multimedia library is related to the lack of checks for division by zero. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and caus...

ffmpeg:ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer: Index-out-of-bounds in decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5354894996930560 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMALOSSLESSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer: Stack-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5802928738271232 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDWMALOSSLESSfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_THEORA_fuzzer: Crash in ff_put_pixels8_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6751648258588672 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTHEORAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001044f27f...

ffmpeg:ffmpeg_dem_IMF_fuzzer: Invalid-free in xmlFreeNodeList

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5190228531347456 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6190000000dd Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_DFPWM_fuzzer: Heap-buffer-overflow in dfpwm_dec_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4520058007715840 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDFPWMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

ffmpeg:ffmpeg_BSF_VP9_SUPERFRAME_fuzzer: Heap-buffer-overflow in vp9_superframe_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5173378975137792 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFVP9SUPERFRAMEfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_dem_IMF_fuzzer: Invalid-free in xmlFreeProp

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5760819097370624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIMFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6190000000e7 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_ALS_fuzzer: Heap-buffer-overflow in av_freep

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4874997192065024 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDALSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_ALS_fuzzer: Heap-buffer-overflow in decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6473487382872064 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDALSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_DFPWM_fuzzer: Heap-buffer-overflow in au_decompress

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4947856883056640 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDDFPWMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

ffmpeg:ffmpeg_dem_DASH_fuzzer: Invalid-free in xmlFreeNodeList

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5483980470747136 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemDASHfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Invalid-free Crash Address: 0x619000000110 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_DFPWM_fuzzer: Heap-buffer-overflow in dfpwm_dec_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5239786212818944 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDDFPWMfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

Tdarr 2.00.15 Command Injection

Exploit Title: Tdarr 2.00.15 - Command Injection Date: 10/03/2022 Exploit Author: Sam Smith Vendor Homepage: https://tdarr.io Software Link: https://f000.backblazeb2.com/file/tdarrs/versions/2.00.15/linuxarm64/TdarrServer.zip Version: 2.00.15 likely also older versions Tested on: 2.00.15 Exploit:...

Tdarr 2.00.15 - Command Injection Vulnerability

Exploit Title: Tdarr 2.00.15 - Command Injection Exploit Author: Sam Smith Vendor Homepage: https://tdarr.io Software Link: https://f000.backblazeb2.com/file/tdarrs/versions/2.00.15/linuxarm64/TdarrServer.zip Version: 2.00.15 likely also older versions Tested on: 2.00.15 Exploit: The Help tab...

ffmpeg:ffmpeg_dem_DASH_fuzzer: Invalid-free in xmlFreeNodeList

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5198160832626688 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemDASHfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Invalid-free Crash Address: 0x61900227d6f6 Crash State:...

ffmpeg:ffmpeg_BSF_VP9_SUPERFRAME_SPLIT_fuzzer: Heap-buffer-overflow in vp9_superframe_split_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4984270639202304 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFVP9SUPERFRAMESPLITfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

PT-2022-6793 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to 3.0 Description: An issue was discovered in the FFmpeg package, where the vp3 decode frame function in libavcodec/vp3.c lacks a check of the return value of av malloc, which will cause a null pointer dereference. This...