DEBIAN-CVE-2024-7272

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fillaudiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versio...

UBUNTU-CVE-2024-7272

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fillaudiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versio...

CVE-2024-7272

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fillaudiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versio...

CVE-2024-7272: Heap-based Buffer Overflow

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fillaudiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versio...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 5.1.5 and earlier versions, which originates in the fillaudiodata function in file /libswresample/swresample.c that causes a heap-based...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer: Use-of-uninitialized-value in clip_output_fixed

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5001538727116800 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACFIXEDfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

ffmpeg:ffmpeg_AV_CODEC_ID_RV30_fuzzer: Use-of-uninitialized-value in put_rv30_tpel8_h_lowpass

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6494489919684608 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDRV30fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBVPX_VP9_fuzzer: Use-of-uninitialized-value in vpx_variance64x64_avx2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5254458043334656 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBVPXVP9fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBVPX_VP9_fuzzer: Use-of-uninitialized-value in vpx_variance32x32_avx2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5149933689176064 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBVPXVP9fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1_fuzzer: Use-of-uninitialized-value in vc1_loop_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6366103557701632 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

ffmpeg:ffmpeg_IO_DEMUXER_fuzzer: Use-of-uninitialized-value in ff_ape_parse_tag

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5697034877730816 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegIODEMUXERfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_MAGICYUV_fuzzer: Use-of-uninitialized-value in predict_slice

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4835252046987264 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMAGICYUVfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

SUSE CVE-2024-7055

A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnmdecodeframe in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t...

SUSE SLED15: ffmpeg-4 / ffmpeg-4-libavcodec-devel / ffmpeg-4-libavdevice-devel / etc (SUSE-SU-2024:2864-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2864-1 advisory. - CVE-2024-32230: Fixed buffer overflow due to negative-size-param bug in loadinputpicture...

SUSE-SU-2024:2864-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2024-32230: Fixed buffer overflow due to negative-size-param bug in loadinputpicture bsc1227296. - CVE-2023-51798: Fixed buffer overflow via a floating point exception FPE error at libavfilter/vfminterpolate.c bsc1223304...

ffmpeg:ffmpeg_AV_CODEC_ID_H264_fuzzer: Use-of-uninitialized-value in weight_h264_pixels16_9_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6269907648446464 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDH264fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

FFmpeg Buffer Overflow Vulnerability (CNVD-2025-01689)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version 7.0.1 and earlier versions, which originates from the pnmdecodeframe function in library/libavcodec/pnmdec.c that fails to correctly...

CVE-2024-7272 FFmpeg swresample.c fill_audiodata heap-based overflow

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fillaudiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versio...

CVE-2024-7272

FFmpeg CVE-2024-7272 affects FFmpeg up to 5.1.5, specifically the fill_audiodata path in /libswresample/swresample.c. The issue is a heap-based buffer overflow that can be triggered remotely. A fix exists in FFmpeg 6.0 (commit 9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6); a backport for 5.1 was omit...

CVE-2024-7272

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fillaudiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versio...