OPENSUSE-SU-2017:1531-1 Security update for ffmpeg

This update of ffmpeg to version 3.1.8 fixes the following security issues: - CVE-2016-9561: DoS through huge memory allocation bsc1015120 - CVE-2016-10191: remote code execution vulnerability bsc1022921 - CVE-2016-10192: remote code execution vulnerability bsc1022922 - CVE-2017-5024: Heap overfl...

OPENSUSE-SU-2017:1532-1 Security update for ffmpeg

ffmpeg was updated to fix the following security issues: CVE-2016-10191: remote exploitaion results code execution bsc1022921 CVE-2016-10192: remote exploitaion results code execution bsc1022922 CVE-2017-7866: stack-based buffer overflow bsc1034176 CVE-2017-7865: heap-based buffer overflow...

ffmpeg: Index-out-of-bounds in add_candidate_ref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5012343912136704 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHEVCfuzzer Fuzz target binary: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

ffmpeg: Heap-buffer-overflow in filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5688641642823680 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDCFHDfuzzer Fuzz target binary: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

ffmpeg: Index-out-of-bounds in ff_h264_pred_weight_table

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5267945972301824 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDH264fuzzer Fuzz target binary: ffmpegAVCODECIDH264fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

Google Chrome FFmpeg Memory Misreference Vulnerability

Google Chrome is a web browser developed by Google.FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A memory misreference vulnerability exists in the libavformat/mov.c file of FFmpeg in Google Chrome version 41.0.2251.0. A remote attacker...

Automattic: SSRF and local file disclosure in https://wordpress.com/media/videos/ via FFmpeg HLS processing

Summary FFmpeg is a video encoding software that appears to be used by wordpress.com for video processing for paid accounts. FFmpeg is known to process HLS playlists that may contain references to external files. I was able to fire this feature using GAB2 subtitle chunks inside an AVI file. After...

CVE-2015-1207

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...

UBUNTU-CVE-2015-1207

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...

CVE-2015-1207

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...

CVE-2015-1207

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...

CVE-2015-1207

CVE-2015-1207 is a double-free vulnerability in libavformat/mov.c of FFmpeg affecting Google Chrome 41.0.2251.0, exploitable via a crafted .m4a file to cause memory corruption and a denial of service. Publicly documented in OSV and Debian advisories, with Debian noting fixes in libav 6:11.12-1~de...

CVE-2015-1207

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...

PT-2017-6479

Name of the Vulnerable Software and Affected Versions FFMPEG version in Google Chrome 41.0.2251.0 Description A double-free issue in libavformat/mov.c allows remote attackers to cause a denial of service, resulting in memory corruption and a crash, via a crafted .m4a file. Recommendations For the...

ffmpeg: Crash in ff_put_pixels8_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5036861833609216 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMXPEGfuzzer Fuzz target binary: ffmpegAVCODECIDMXPEGfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash...

ffmpeg: Index-out-of-bounds in ff_hevc_decode_short_term_rps

Detailed report: https://oss-fuzz.com/testcase?key=6209288450080768 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHEVCfuzzer Fuzz target binary: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ffmpeg: Stack-buffer-overflow in FDKmemset

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6319232084082688 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

ffmpeg: Global-buffer-overflow in svq3_decode_mb

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6645980176842752 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDSVQ3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x0000008b6a99 Crash...

ffmpeg: Stack-buffer-overflow in put_bilin_2d_hv_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6266250911023104 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDVP9fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address: 0x7f33441d38a0 Crash...

ffmpeg: Global-buffer-overflow in stereo_processing

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4957953339686912 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACFIXEDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000018bb420...