CVE-2016-7502

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

CVE-2016-7562

The ffdrawpcfont function in libavcodec/cgadata.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service buffer overflow via a crafted AVI file...

CVE-2016-7905

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

CVE-2016-7555

The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...

CVE-2016-7785

The avireadseek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-7450

The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...

CVE-2016-7562: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ffdrawpcfont function in libavcodec/cgadata.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service buffer overflow via a crafted AVI file...

CVE-2016-8595: Improper Input Validation

The gsmparse function in libavcodec/gsmparser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-7122: Undefined Security Weakness

The avireadnikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure...

CVE-2016-7785: Improper Input Validation

The avireadseek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-7502: Out-of-bounds Read

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

CVE-2016-7905: NULL Pointer Dereference

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

CVE-2016-6671: Improper Restriction of Operations within the Bounds of a Memory Buffer

The rawdecode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted SWF file...

CVE-2016-7450: Out-of-bounds Read

The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...

CVE-2016-7555: Exposure of Sensitive Information to an Unauthorized Actor

The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...

PT-2016-7152

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.3 Description The issue allows remote attackers to cause a denial of service via a crafted SWF file, potentially leading to an infinite loop. This is due to a problem in the zlib refill function in...

CVE-2016-6881: Undefined Security Weakness

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

PT-2016-7513

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.5 Description The issue allows remote attackers to cause a denial of service via a crafted AVI file, specifically through the gsm parse function in libavcodec/gsm parser.c. Recommendations For versions prior to...

PT-2016-7032

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.2 Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafted SWF file, due to memory corruption in the raw decode function in libavcodec/rawdec.c...

PT-2016-7229

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue arises from the avi read nikon function in libavformat/avidec.c, which can enter an infinite loop when decoding a specially crafted AVI file containing a 'nctg' structure. Recommendations Fo...