10849 matches found
CVE-2018-12460
libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service, related to idctdsp.c and mpegvideo.c...
CVE-2018-12458
An improper integer type in the mpeg4encodegopheader function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...
CVE-2018-12459: Improper Input Validation
An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...
PT-2018-11191
Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0 Description The issue is related to a NULL pointer dereference in libavcodec when the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4. This can lead to a denial of service. The problem is...
PT-2018-11189
Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.8 through 4.0 Description The issue is related to an improper integer type in the mpeg4 encode gop header function, which may cause an assertion violation when converting a crafted AVI file to MPEG4. This can lead to a denial...
CVE-2018-12460: NULL Pointer Dereference
libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service, related to idctdsp.c and mpegvideo.c...
CVE-2018-12458: Improper Input Validation
An improper integer type in the mpeg4encodegopheader function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...
Unspecified vulnerability in ffmepg
ffmepg is a package that steals environment variables. A security vulnerability exists in ffmepg. An attacker can exploit the vulnerability to steal environment variables...
PT-2018-4004
Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0 Description The issue is related to an inconsistent bits-per-sample value in the ff mpeg4 decode picture header function, which may trigger an assertion violation when converting a crafted AVI file to MPEG4. This can lead to...
CVE-2017-16068
ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
ffmpeg/ffmpeg_AV_CODEC_ID_AC3_fuzzer: Global-buffer-overflow in ac3_decode_frame
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5116430537195520 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDAC3fuzzer Fuzz target binary: ffmpegAVCODECIDAC3fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Cras...
ffmpeg/ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in ff_h263_pred_motion
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5385746536988672 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMPEG4fuzzer Fuzz target binary: ffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overfl...
ffmpeg/ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Index-out-of-bounds in dct_unquantize_mpeg2_intra_mmx
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6298641835753472 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMPEG4fuzzer Fuzz target binary: ffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-boun...
ffmpeg/ffmpeg_AV_CODEC_ID_H264_fuzzer: Index-out-of-bounds in hl_motion_444_simple_8
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5703295145345024 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDH264fuzzer Fuzz target binary: ffmpegAVCODECIDH264fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...
DEBIAN-CVE-2018-7751
The svgprobe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service Infinite Loop via a crafted XML file...
Design/Logic Flaw
The svgprobe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service Infinite Loop via a crafted XML file...
UBUNTU-CVE-2018-7751
The svgprobe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service Infinite Loop via a crafted XML file...
CVE-2018-7751
The svgprobe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service Infinite Loop via a crafted XML file...
