CVE-2012-2805

Technical details for CVE-2012-2805 are not publicly available in the provided documents. No affected version, impact, or remediation specifics are given here. Monitor for updates.

CVE-2013-0870

The CVE-2013-0870 issue affects FFmpeg 1.1.4, where the vp3_decode_frame function causes the thread check to move out of the header packet type check. This is described as a vulnerability in FFmpeg with a CVSS v2 base score of 7.5 (HIGH) and CVSS v3 base score of 9.8 (CRITICAL) with network attac...

ffmpeg: Index-out-of-bounds in hls_transform_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4736774054084608 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHEVCfuzzer Fuzz target binary: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeguntrusted Platform Id: linux Crash Type:...

PT-2017-5442

Name of the Vulnerable Software and Affected Versions: FFmpeg version 1.1.4 Description: The issue is related to the vp3 decode frame function, which incorrectly moves threads check out of header packet type check. Recommendations: For FFmpeg version 1.1.4, consider updating to a newer version th...

CVE-2013-0870: Undefined Security Weakness

The 'vp3decodeframe' function in FFmpeg 1.1.4 moves threads check out of header packet type check...

CVE-2012-2805: Improper Resource Shutdown or Release

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service...

DSA-3957-1 ffmpeg - security update

Bulletin has no description...

PT-2017-5115

Name of the Vulnerable Software and Affected Versions: FFMPEG version 0.10 Description: The issue allows remote attackers to cause a denial of service. Recommendations: For FFMPEG version 0.10, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

Debian: Security Advisory (DSA-3957-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2017-0295 Updated avidemux packages fix security vulnerabilities

The avidemux package has been updated to version 2.7.0. Avidemux includes a bundled copy of the ffmpeg libraries, which have been updated from version 3.0.7 to version 3.3.3, fixing several security issues and other bugs...

Updated avidemux packages fix security vulnerabilities

The avidemux package has been updated to version 2.7.0. Avidemux includes a bundled copy of the ffmpeg libraries, which have been updated from version 3.0.7 to version 3.3.3, fixing several security issues and other bugs...

PT-2017-19436

Name of the Vulnerable Software and Affected Versions Avidemux versions prior to 2.7.0 Description The issue concerns security problems and other bugs in the bundled ffmpeg libraries within Avidemux, which have been addressed by updating the ffmpeg libraries from version 3.0.7 to version 3.3.3...

Ffmpeg Null Pointer Reference Remote Denial of Service Vulnerability

FFmpeg is a free program that performs recording, transferring and streaming of audio and video in various formats. FFmpeg suffers from a null pointer reference remote denial of service vulnerability that could be exploited by an attacker to submit a special file that could be parsed by the user,...

MGASA-2017-0262 Updated ffmpeg packages fix security vulnerabilities

This update provides ffmpeg version 3.3.3, which fixes several security vulnerabilities and other bugs which were corrected upstream...

Updated ffmpeg packages fix security vulnerabilities

This update provides ffmpeg version 3.3.3, which fixes several security vulnerabilities and other bugs which were corrected upstream...

ffmpeg: Index-out-of-bounds in decode_header

Detailed report: https://oss-fuzz.com/testcase?key=6421736130084864 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDSNOWfuzzer Fuzz target binary: ffmpegAVCODECIDSNOWfuzzer Job Type: libfuzzerubsanffmpeguntrusted Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

CouchPotato: CIA Hacking Tool to Remotely Spy On Video Streams in Real-Time

After disclosing CIA's strategies to hijack and manipulate webcams and microphones to corrupt or delete recordings, WikiLeaks has now published another Vault 7 leak, revealing CIA's ability to spy on video streams remotely in real-time. Dubbed 'CouchPotato,' document leaked from the CIA details h...

Unspecified Vulnerability in Ffmpeg (CNVD-2017-20990)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. There is an unspecified vulnerability in Ffmpeg, and no detailed vulnerability details are provided at this time...

Unspecified Vulnerability in Ffmpeg (CNVD-2017-20992)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. There is an unspecified vulnerability in Ffmpeg, and no detailed vulnerability details are provided at this time...

Unspecified vulnerability in Ffmpeg (CNVD-2017-20993)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. There is an unspecified vulnerability in Ffmpeg, and no detailed vulnerability details are provided at this time...