PT-2021-5794

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A heap-based Buffer Overflow issue exists in the get block row function at libavfilter/vf bm3d.c, potentially leading to memory corruption. This issue might allow a remote attacker to access confidential data,...

PT-2021-5789

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description The issue is related to a heap-based Buffer Overflow vulnerability in the slice get derivative function of the FFmpeg library. This vulnerability can be exploited by a remote attacker to gain access to confidenti...

PT-2021-4627

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A heap-based Buffer Overflow issue exists in the gaussian blur component of the FFmpeg library, specifically at libavfilter/vf edgedetect.c. This could lead to memory corruption and other potential consequences...

PT-2019-6261

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A Denial of Service issue exists due to a memory leak in the wtvfile open sector function in wtvdec.c. This is caused by incorrect memory deallocation before removing the last reference, allowing a remote attacke...

PT-2021-4532

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A Buffer Overflow issue exists in the config input function at libavfilter/af tremolo.c, which could allow a remote malicious user to cause a Denial of Service. The vulnerability is related to a buffer overflow i...

PT-2021-4531

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A Heap-based Buffer Overflow issue exists in the filter16 complex low component of the FFmpeg library, potentially leading to memory corruption and other consequences. This could allow a remote attacker to access...

PT-2021-4512

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A heap-based Buffer Overflow issue exists in the filter intra component of the FFmpeg library, specifically in the libavfilter/vf bwdif.c file. This could lead to memory corruption and other potential consequence...

PT-2019-6245

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A Denial of Service issue exists due to a memory leak in the av dict set function in dict.c. This is caused by incorrect memory deallocation before removing the last reference, allowing a remote attacker to cause...

PT-2021-4626

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A heap-based Buffer Overflow issue exists in the filter frame function at libavfilter/vf fieldorder.c, potentially leading to memory corruption and other consequences. This could allow a remote attacker to access...

PT-2019-6257

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A Denial of Service issue exists due to a memory leak in the avpriv float dsp allocl function in libavutil/float dsp.c. This is caused by incorrect memory deallocation before removing the last reference, allowing...

PT-2021-10718

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A Denial of Service issue exists due to a memory leak in the inavi add ientry function. Recommendations For FFmpeg version 4.2, at the moment, there is no information about a newer version that contains a fix for...

PT-2021-6725

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A heap-use-after-free issue in the av freep function of the libavutil/mem.c component in FFmpeg allows attackers to execute arbitrary code, potentially leading to unauthorized access to confidential data,...

PT-2021-4510

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A heap-based Buffer Overflow issue exists in the crossfade samples fltp function of the libavfilter/af afade.c component, potentially leading to memory corruption. This could allow a remote attacker to impact the...

PT-2021-4533

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description The issue is related to a Buffer Overflow vulnerability in the build diff map function in libavfilter/vf fieldmatch.c. This could allow a remote malicious user to cause a Denial of Service. Recommendations For...

ffmpeg:ffmpeg_AV_CODEC_ID_THP_fuzzer: Heap-buffer-overflow in ljpeg_decode_rgb_scan

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5763147314495488 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTHPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

Design/Logic Flaw

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

CVE-2019-15942

CVE-2019-15942 affects FFmpeg up to version 4.2. The vulnerability is a condition/branch issue in the H.264 parser (libavcodec/h2645_parse.c) where alloc_rbsp_buffer mishandles rbsp_buffer, resulting in a numeric/conditional jump based on an uninitialized value. This can lead to a crash under cra...