CVE-2016-10192

Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size...

CVE-2016-10191

CVE-2016-10191 is a heap-based buffer overflow in FFmpeg’s libavformat/rtmppkt.c that can be exploited remotely to execute arbitrary code by sending RTMP packets with mismatched size. Affected branches are FFmpeg up to 2.8.10, 3.0.x up to 3.0.5, 3.1.x up to 3.1.6, and 3.2.x up to 3.2.2. Public ad...

CVE-2016-10192

CVE-2016-10192 : FFmpeg heap-based buffer overflow in ffserver.c due to failure to check chunk size. Affected versions: FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2. Result: remote code execution as described; attack vector is network-based. Remediation: up...

CVE-2016-10191

Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches...

CVE-2016-10190

Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response...

CVE-2016-10192

Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size...

CVE-2016-10192

Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size...

CVE-2016-10190

Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response...

CVE-2016-10191

Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches...

CVE-2016-10190

Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious Motion JPEG file to the system to cause an out-of-bounds array access that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious rle image file to the system that can cause an out-of-bounds array access that can cause the system to crash...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks or possibly other attacks. A malicious user can pass a malicious mp4 file to the system to cause a use-after-free memory error in the system and cause it to crash...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious WebM file to create race conditions in the system that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks or possibly other attacks. A malicious user can pass a malicious png file to the system that can cause an out-of-bounds array access that can lead to the system crashing...

PT-2018-5227

Name of the Vulnerable Software and Affected Versions libav version 13 dev0 ffmpeg version n3.4 chromium versions prior to 56 before Feb 13, 2017 Description The issue arises from the return value of init get bits being ignored, leading to get ue golomb&gb being called on an uninitialized get bit...

CVE-2016-10191: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches...

CVE-2016-10190: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response...

PT-2017-2340

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.10 FFmpeg versions 3.0.x prior to 3.0.5 FFmpeg versions 3.1.x prior to 3.1.6 FFmpeg versions 3.2.x prior to 3.2.2 Description The issue is caused by a heap-based buffer overflow in the ffserver.c component of FFmpe...

PT-2017-2341

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.10 FFmpeg versions 3.0.x prior to 3.0.5 FFmpeg versions 3.1.x prior to 3.1.6 FFmpeg versions 3.2.x prior to 3.2.2 Description The issue is a heap-based buffer overflow in the libavformat/rtmppkt.c component of...