CVE-2019-17542

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...

CVE-2019-17542

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...

CVE-2019-17539: NULL Pointer Dereference

In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

CVE-2019-17542: Out-of-bounds Write

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...

FFmpeg Null Pointer Dereference Vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A null pointer dereference vulnerability exists in avcodecopen2 in libavcodec/utils.c in versions of FFmpeg prior to 4.2, which can be exploited b...

FFmpeg Buffer Overflow Vulnerability (CNVD-2020-13570)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A heap buffer overflow vulnerability exists in vqadecodechunk in versions of FFmpeg prior to 4.2, which can be exploited by an attacker to cause a...

PT-2019-6177 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to a division by zero in the filter frame function of the libavfilter/vf lenscorrection.c component. This allows attackers to cause a Denial of Service or potentially gain access to...

PT-2019-6196 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to an Integer Overflow vulnerability in the filter16 prewitt function within the libavfilter/vf convolution.c component of the Ffmpeg library. This vulnerability can be exploited by a...

PT-2019-6448 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2.1 Description: The issue is related to an Integer Overflow vulnerability in the filter sobel function within the libavfilter/vf convolution.c component of the FFmpeg library. This vulnerability can be exploited by attackers...

PT-2019-6449 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to an integer overflow vulnerability in the filter robert function within the libavfilter/vf convolution.c file of Ffmpeg. This vulnerability allows attackers to cause a Denial of Service...

PT-2019-6451 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2.1 Description: The issue is related to an integer overflow vulnerability in the filter16 sobel function within the libavfilter/vf convolution.c component of the FFmpeg multimedia library. This vulnerability can be exploited...

ffmpeg:ffmpeg_AV_CODEC_ID_HCOM_fuzzer: Crash in hcom_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5647235349479424 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHCOMfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002f45db8...

The vulnerability of the FFmpeg multimedia library, related to the assignment of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of the FFmpeg multimedia library relates to the use of a zero pointer when detecting duplicate frames in a single frame incorrectly. Exploiting this vulnerability could allow an attacker to cause a service failure by using specially crafted HEVC data...

ffmpeg:ffmpeg_AV_CODEC_ID_HCOM_fuzzer: Heap-buffer-overflow in hcom_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5634188581011456 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDHCOMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60c000000f1...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBFDK_AAC_fuzzer: Index-out-of-bounds in processDrcTime

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5699860921057280 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_HCOM_fuzzer: Heap-buffer-overflow in hcom_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5674970478280704 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHCOMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

PT-2019-6178 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2.1 Description: A CWE-125: Out-of-bounds read issue exists in the long term filter function in g729postfilter.c during computation of the denominator of pseudo-normalized correlation R'0, that could result in disclosure of...

[SECURITY] Fedora 29 Update: kmplayer-0.12.0b-1.fc29

KMPlayer, a simple front-end for MPlayer/FFMpeg/Phonon. It can play DVD/VCD movies, from file or URL and from a video device. KMPlayer can embed inside Konqueror. Which means if you click on a movie file, the movie is played inside Konqueror...

[SECURITY] Fedora 30 Update: kmplayer-0.12.0b-1.fc30

KMPlayer, a simple front-end for MPlayer/FFMpeg/Phonon. It can play DVD/VCD movies, from file or URL and from a video device. KMPlayer can embed inside Konqueror. Which means if you click on a movie file, the movie is played inside Konqueror...

Fedora Update for kmplayer FEDORA-2019-9b1da08d62

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...