CVE-2021-28429

Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...

CVE-2020-36138

CVE-2020-36138 affects FFmpeg 4.3: the decode_frame function in libavcodec/tiff.c is vulnerable, allowing remote attackers to cause a denial-of-service. The issue is documented across multiple connected sources (NVD and OSV entries) with the same description; no exploit details or mitigation step...

CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

CVE-2021-28429: Integer Overflow or Wraparound

Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...

CVE-2020-36138: NULL Pointer Dereference

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

CVE-2021-28429

CVE-2021-28429 : FFmpeg’s libavutil/timecode.c function av_timecode_make_string contains an integer overflow that can be exploited by a crafted .mov file to cause a local DoS. Affected component: FFmpeg 4.3.2 (timecode handling). Impact is denial of service via crafted MOV input; exploitation is ...

CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

CVE-2021-28429

Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...

CVE-2021-28429

Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...

CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

FFmpeg Input Validation Error Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 4.3.2, which originates from an integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c, which allows local attacker...

PT-2023-11808

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3 Description An issue was discovered in decode frame in libavcodec/tiff.c, allowing remote attackers to cause a denial of service DoS. Recommendations For FFmpeg version 4.3, consider updating to a newer version to mitigate t...

Arbitrary Code Execution

chromium is vulnerable to Arbitrary Code Execution. The vulnerability exists in FFmpeg in Google Chromewhich allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

ffmpeg:ffmpeg_BSF_VVC_METADATA_fuzzer: Index-out-of-bounds in cbs_h266_read_vps

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6709397181825024 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFVVCMETADATAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

Ffmpeg Code Execution Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A code execution vulnerability exists in FFmpeg 0.7.0 and earlier versions, which stems from a failure to properly filter special elements of the constructor snippet in the component...

Code Injection

net.bramp.ffmpeg:ffmpeg is vulnerable to Code Injection. An FFmpeg object can be created using the constructor in FFmpeg.java, but it does not validate the ffmpeg executable path, which allow an attacker to execute malicious code on the system...

SUSE CVE-2023-39018

FFmpeg 0.7.0 and below was discovered to contain a code injection vulnerability in the component net.bramp.ffmpeg.FFmpeg.. This vulnerability is exploited via passing an unchecked argument. NOTE: this is disputed by multiple third parties because there are no realistic use cases in which...

ffmpeg:ffmpeg_dem_EVC_fuzzer: Index-out-of-bounds in hrd_parameters

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5959738853294080 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

CVE-2022-4907

Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2022-4907

Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...