PT-2018-11728

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0.1 Description The issue arises from a missing check for negative values of the mquant variable in the vc1 put blocks clamped function, located in libavcodec/vc1 block.c. This can lead to an out-of-array access when convertin...

PT-2018-4001

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0.1 Description The issue is related to improper maintenance of consistency between the context profile field and studio profile in libavcodec, which may trigger an assertion failure when converting a crafted AVI file to MPEG4...

PT-2018-3995

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 5aba5b89d0b1d73164d3b81764828bb8b20ff32a Description The issue is related to an out of array read in the ASF F format demuxer, which can result in heap memory reading. This can be exploited via a specially crafted ASF...

CVE-2018-13301: NULL Pointer Dereference

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...

PT-2018-3996

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 Description The issue is related to an out of array access vulnerability in the MXF format demuxer, which can result in a denial of service DoS. This can be exploited via a...

PT-2018-3997

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit a7e032a277452366771951e29fd0bf2bd5c029f0 Description The issue is related to a use-after-free vulnerability in the realmedia demuxer of the FFmpeg multimedia library. This vulnerability can be exploited by a...

PT-2018-4002

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0.1 Description The issue is related to a missing check for failure of a call to init get bits8 in the avpriv ac3 parse header function in libavcodec/ac3 parser.c. This may trigger a NULL pointer dereference while converting a...

CVE-2018-13300: Out-of-bounds Read

In FFmpeg 3.2 and 4.0.1, an improper argument AVCodecParameters passed to the avprivrequestsample function in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information...

ffmpeg/ffmpeg_AV_CODEC_ID_JPEGLS_fuzzer: Heap-buffer-overflow in decode_dc_progressive

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5684770334834688 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDJPEGLSfuzzer Fuzz target binary: ffmpegAVCODECIDJPEGLSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBVPX_VP8_fuzzer: Heap-use-after-free in av_packet_ref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5768227253649408 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBVPXVP8fuzzer Fuzz target binary: ffmpegAVCODECIDLIBVPXVP8fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

PT-2018-4003

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.0.1 Description The issue is related to the ff mpeg4 decode picture header function in the libavcodec/mpeg4videodec.c component of the FFmpeg multimedia library. It is caused by a missing check of a profile value...

PT-2018-2293

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.0.1 Description The issue is related to the improper handling of frame types, other than EAC3 FRAME TYPE INDEPENDENT, that have multiple independent substreams in the handle eac3 function. This may trigger an...

PT-2018-3999

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 Description The issue is related to a buffer data boundary reading vulnerability in the mms protocol of the FFmpeg multimedia library. Exploitation of this issue may allo...

FFmpeg Denial of Service Vulnerability (CNVD-2018-23869)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'mpeg4encodegopheader' function in the libavcodec/mpeg4videoenc.c file in FFmpeg. An attacker can exploit this vulnerability to cause a denial of...

FFmpeg Libavcodec Denial of Service Vulnerability

FFmpeg is the FFmpeg team's complete solution for recording, converting, and streaming audio and video. libavcodec is one of the general-purpose encoding/decoding libraries. A security vulnerability exists in Libavcode in FFmpeg. The vulnerability can be exploited to cause a denial of service nul...

FFmpeg 'ff_mpeg4_decode_picture_header' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffmpeg4decodepictureheader' function in the libavcodec/mpeg4videodec.c file in FFmpeg. The vulnerability can be exploited to cause a denial of servic...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a mp4 file with an inconsistent bits-per-sample value to cause an assertion violation that can crash the application...

ffmpeg/ffmpeg_AV_CODEC_ID_EAC3_fuzzer: Global-buffer-overflow in ac3_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5851861780267008 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDEAC3fuzzer Fuzz target binary: ffmpegAVCODECIDEAC3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overfl...

Integer overflow

An improper integer type in the mpeg4encodegopheader function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

Design/Logic Flaw

An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...