PT-2018-18154

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.8 through 3.4.2 Description The issue allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data. This is due to a problem in the decode init...

ffmpeg/ffmpeg_AV_CODEC_ID_INDEO4_fuzzer: Index-out-of-bounds in decode_band_hdr

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4787296550256640 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDINDEO4fuzzer Fuzz target binary: ffmpegAVCODECIDINDEO4fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_FIC_fuzzer: Heap-buffer-overflow in fic_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6317064647081984 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDFICfuzzer Fuzz target binary: ffmpegAVCODECIDFICfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_SCPR_fuzzer: Heap-buffer-overflow in decompress_p

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6289698747056128 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDSCPRfuzzer Fuzz target binary: ffmpegAVCODECIDSCPRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...

openSUSE Security Update : ffmpeg (openSUSE-2018-172)

This update for ffmpeg fixes the following issues : Updated ffmpeg to new bugfix release 3.4.2 - Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. - avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 - avcodec/utvideodec: Fix bytes lef...

OPENSUSE-SU-2018:0476-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: Updated ffmpeg to new bugfix release 3.4.2 Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 avcodec/utvideodec: Fix bytes left check...

OPENSUSE-SU-2018:0470-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: Updated ffmpeg to new bugfix release 3.4.2 Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 avcodec/utvideodec: Fix bytes left check...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because an out-of-array read can occur when the decodeplane function in libavcodec/utvideodec.c, when processing an AVI file, leading to a denial of service attack...

CVE-2018-6912

The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

DEBIAN-CVE-2018-6912

The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

CVE-2018-6912

The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

CVE-2018-6912

The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

CVE-2018-6912

The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

CVE-2018-6912

CVE-2018-6912 affects FFmpeg up to 3.4.2 and is caused by the decode_plane function in libavcodec/utvideodec.c that can trigger an out-of-bounds read in a crafted AVI file, leading to a denial of service. Documents do not show exploit details. A remediation indicated by Gentoo GLSA-202003-65 is t...

CVE-2018-6912

The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

CVE-2018-6912

The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

CVE-2018-6912

The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

CVE-2018-6912: Out-of-bounds Read

The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

Ffmpeg 'decode_plane' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeplane' function in the libavcodec/utvideodec.c file in FFmpeg 3.4.2 and earlier versions. A remote attacker can exploit this vulnerability to...

PT-2018-3992

Name of the Vulnerable Software and Affected Versions FFmpeg versions through 3.4.2 Description The issue is related to the decode plane function in the libavcodec/utvideodec.c component of the FFmpeg library. It allows remote attackers to cause a denial of service due to an out of array read via...