PT-2017-2342

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.10 FFmpeg versions 3.0.x prior to 3.0.5 FFmpeg versions 3.1.x prior to 3.1.6 FFmpeg versions 3.2.x prior to 3.2.2 Description The issue is caused by a heap-based buffer overflow in the libavformat/http.c component ...

CVE-2016-10192: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks or possibly other attacks. A malicious user can pass a malicious MJPEG file to the system to cause an out-of-bounds array access to that can cause the system to crash...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious AAC file to the system to cause an out-of-bounds array access that can cause the system to crash...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious MPEG video file to the system to cause invalid pointer access that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and other possible attacks. A malicious user can pass a malicious LucasArts Smush file to the system to cause a segmentation violation that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious ALAC file to the system that can cause a segmentation fault that can lead to the system crashing...

ffmpeg: Heap-use-after-free in put_h264_qpel16_mc00_9_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6107186067406848 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDH264fuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious AVI file to the system that can cause a segmentation violation that will crash the system...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious AVI file to the system to cause invalid pointer access that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass malicious RealVideo data to the system to cause an invalid pointer access that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious MJPEG file to the system that can cause an out-of-bounds array access that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass malicious HEVC data to the system to cause an out-of-bounds array access that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass amalicious CCITT FAX data to the system that can cause an out-of-bounds array access that can cause the system to crash...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious JPEG2000 file to the system that can cause an out-of-bounds array access that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious jpeg file to the system to cause an out-of-bounds heap-memory access which can cause the system to crash...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass an Indeo Video file to the system to cause an integer overflow that can lead to the system crashing...

ffmpeg: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6424225917173760 Project: ffmpeg Fuzzer: ffmpegVIDEOAVCODECIDPICTORfuzzer Job Type: libfuzzerasanffmpeg Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f77cbd4ca6f Crash Stat...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a smacker video file to the system that can cause an out-of-bounds array access that can cause the system to crash...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attack. A malicious user can pass a malicious mpeg4 file to the system to cause an out-of-bounds array read which can crash the system...