vulhub1

It is an offensive tool for web application security training. The repository contains a collection of vulnerable docker environments for web application security training. The tool is designed to be easy to use, requiring only two simple commands to set up a vulnerable environment. The tool is...

ffmpeg:ffmpeg_AV_CODEC_ID_SIREN_fuzzer: Global-buffer-overflow in decode_vector

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6332019122503680 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSIRENfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

vulhub

It is an offensive tool for Docker environments. The repository contains a collection of vulnerable Docker environments, including CouchDB, FFmpeg, Git, InfluxDB, and Oracle Java. The environments are designed to be used for testing and training purposes, allowing users to practice exploiting...

ffmpeg:ffmpeg_AV_CODEC_ID_FFV1_fuzzer: Heap-buffer-overflow in get_rac

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5369575948550144 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDFFV1fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in cfhd_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4916296355151872 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

Binary vulnerability in FFmpeg tiff format

FFmpeg is a set of open source computer programs that can be used to record and convert digital audio and video into streams. A binary vulnerability exists in the FFmpeg tiff format, which can be exploited by attackers to cause a denial-of-service attack...

ffmpeg:ffmpeg_dem_WAV_fuzzer: Heap-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5650565572591616 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemWAVfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_EXR_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4770472801337344 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDEXRfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer:...

ffmpeg:ffmpeg_AV_CODEC_ID_RSCC_fuzzer: Heap-buffer-overflow in image_copy_plane

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5196757675540480 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDRSCCfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62b00000660...

ffmpeg:ffmpeg_dem_VIVIDAS_fuzzer: Heap-buffer-overflow in av_xiphlacing

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5682070692823040 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemVIVIDASfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f9cf21782df...

ffmpeg:ffmpeg_dem_FITS_fuzzer: Heap-buffer-overflow in fits_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5129775942991872 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegdemFITSfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Heap-buffer-overflow in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5083469356728320 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_dem_ASF_O_fuzzer: Crash in set_language

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6197611002068992 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemASFOfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62400013e860 Crash State:...

TikTok: RCE on TikTok Ads Portal

The video upload endpoint on the TikTok Ads portal was potentially susceptible to remote code execution RCE due to a ffmpeg misconfiguration. We thank @ bubbounty for reporting this to our team and confirming the resolution. During my research on the TikTok Ads portal I found a RCE thought the...

ffmpeg:ffmpeg_AV_CODEC_ID_ADPCM_SWF_fuzzer: Heap-buffer-overflow in adpcm_swf_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5764465137811456 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDADPCMSWFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

ffmpeg:ffmpeg_dem_MPEGTSRAW_fuzzer: Heap-buffer-overflow in mpegts_raw_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6282861159907328 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegdemMPEGTSRAWfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_MAGICYUV_fuzzer: Heap-buffer-overflow in magy_decode_slice

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6005121199374336 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMAGICYUVfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Crash in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5636198112165888 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6210400028ff Crash...

ffmpeg:ffmpeg_dem_VIVIDAS_fuzzer: Heap-buffer-overflow in avio_read

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6581200338288640 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemVIVIDASfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x6150000001e5...

PT-2020-5591

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3.1 Description The issue is related to an out-of-bounds write in the track header function of the libavformat library in FFmpeg, caused by incorrect extradata packing. This can potentially allow a remote attacker to cause a...