ffmpeg:ffmpeg_BSF_EVC_FRAME_MERGE_fuzzer: Index-out-of-bounds in ff_evc_parse_sps

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4633529766772736 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFEVCFRAMEMERGEfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

ffmpeg:ffmpeg_dem_FLV_fuzzer: Heap-buffer-overflow in flv_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5433076799635456 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemFLVfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in cbs_h266_read_nal_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5870590815502336 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-use-after-free in cbs_h266_read_nal_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5039469976485888 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Memcpy-param-overlap in put_hevc_pel_uni_pixels_10

Detailed Report: https://oss-fuzz.com/testcase?key=4992746590175232 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0xf6635d00,0xf6635d10 and 0xf6635cfc, 0xf6635d0...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Memcpy-param-overlap in put_hevc_pel_uni_pixels_10

Detailed Report: https://oss-fuzz.com/testcase?key=4992746590175232 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0xf6635d00,0xf6635d10 and 0xf6635cfc, 0xf6635d0...

ffmpeg:ffmpeg_dem_EVC_fuzzer: Index-out-of-bounds in ff_evc_parse_pps

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4645761749745664 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

FFmpeg decode_main_header Heap Buffer Overflow DoS

The vulnerability of the decodemainheader function libavformat/nutdec.c in the FFmpeg multimedia library is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ffmpeg:ffmpeg_dem_EVC_fuzzer: Crash in av_freep

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6247206014025728 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x616df5dd9240 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Memcpy-param-overlap in put_hevc_pel_uni_pixels_8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4915653244223488 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in ff_mpeg4_decode_studio

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5767982157266944 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash...

ROS-20230620-01

Ffmpeg multimedia library vulnerability is related to NULL pointer dereferencing error in function decodemainheader in libavformat/nutdec.c. Exploitation of the vulnerability could allow an attacker, remotely, trick a victim into opening a specially crafted file and performing a denial-of-service...

ffmpeg:ffmpeg_BSF_EVC_FRAME_MERGE_fuzzer: Segv on unknown address in ff_evc_parse_nal_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6240076603195392 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFEVCFRAMEMERGEfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

ROS-20230616-02

Vulnerability in libavcodec/pthreadframe.c component of FFmpeg multimedia library is related to memory usage after it is freed when processing worker threads with hwaccel decoder. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...

vulhub

This repository is an open-source collection of pre-built vulnerable Docker environments, known as Vulhub. It is a defensive research tool for improving detection, response, and patch prioritization. The repository contains various vulnerable environments, including CouchDB, FFmpeg, Git, and more...

ffmpeg:ffmpeg_dem_JPEGXL_ANIM_fuzzer: Stack-buffer-overflow in ff_jpegxl_verify_codestream_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5029813220671488 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemJPEGXLANIMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffdc73a47...

Debian: Security Advisory (DLA-3454-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3454-1] ffmpeg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3454-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 13, 2023 https://wiki.debian.org/LTS -...

Debian dla-3454 : ffmpeg - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3454 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3454-1 [email protected]...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEG1VIDEO_fuzzer: Heap-buffer-overflow in avg_h264_chroma_mc1_8_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5194311374077952 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMPEG1VIDEOfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...