CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

GHSA-WX43-G55G-2JF4 LocalAI Command Injection in audioToWav

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

LocalAI Command Injection in audioToWav

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

CVE-2024-2029

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

CVE-2024-2029 Command Injection in mudler/localai

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

CVE-2024-2029

A command injection vulnerability exists in the "TranscriptEndpoint" of mudler/localai, specifically within the "audioToWav" function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing...

CVE-2024-2029 Command Injection in mudler/localai

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

localai 操作系统命令注入漏洞

LocalAI is a free, open source alternative to OpenAI from the individual developer Ettore Di Giacinto. localai suffers from an operating system command injection vulnerability that stems from failure to clean up a user-supplied filename before passing it to ffmpeg via a shell command, allowing an...

CVE-2024-2029: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing the...

PT-2024-6292

Name of the Vulnerable Software and Affected Versions FFmpeg version 7.0 Description The issue is related to the load input picture function in the FFmpeg multimedia library, which involves copying a buffer without checking the size of the input data. This can allow an attacker to execute arbitra...

Mageia: Security Advisory (MGASA-2024-0083)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-27097

Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1 Description The issue is related to an integer overflow in the WAVARC decoder of the libavcodec library when handling certain block types. This can lead to a denial-of-service DoS condition. Recommendations For FFmpeg...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Global-buffer-overflow in av_channel_layout_copy

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4554553191104512 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIAMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x000000df8ae8 Cras...

ffmpeg:ffmpeg_AV_CODEC_ID_VP4_fuzzer: Crash in vp3_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6291788159385600 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVP4fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000104c27348...

PT-2024-10419

Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1 Description The issue is related to an integer overflow in the libavformat/westwood vqa.c component of the FFmpeg library. This can be exploited by a remote attacker using a specially crafted VQA file, potentially leading ...

PT-2024-10418

Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1 Description The issue is related to an integer overflow in the FFmpeg CAF decoder. This could potentially allow an attacker to cause a denial of service. Recommendations For version 6.1.1, consider updating to a newer...

PT-2025-2441

Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1.1 Description: The issue is a double-free vulnerability in the fftools/ffmpeg mux init.c component of FFmpeg, specifically within the new stream audio function. This vulnerability occurs in the audio processing component o...

MGASA-2024-0083 Updated ffmpeg packages fix security vulnerability

Out of array access in avformat/rtsp. CVE-2023-47342...

Updated ffmpeg packages fix security vulnerability

Out of array access in avformat/rtsp. CVE-2023-47342...

ffmpeg:ffmpeg_dem_MOV_fuzzer: Heap-buffer-overflow in mov_read_ispe

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4996530429820928 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemMOVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6030000003f0 Crash...