CVE-2022-2566

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in "buildopengopkeypoints" goes through all entries in the loop and adds "sc-cttsdatai.count" to "sc-sampleoffsetscount". This can lead to an integer overflow resulting in a small allocation with "avcalloc"...

CVE-2022-2566

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

CVE-2022-2566

FFmpeg vulnerability CVE-2022-2566: A heap out-of-bounds memory write introduced since version 5.1 in the function build_open_gop_key_points(), where adding sc->ctts_data[i].count to sc->sample_offsets_count may overflow, leading to a too-small allocation (av_calloc()) and potential remote ...

CVE-2022-2566 Heap-memory write in FFMPEG

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

CVE-2022-2566 Heap-memory write in FFMPEG

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

libavcodec/aaccoder DoS

The vulnerability of the libavcodec/aaccoder component in the FFmpeg multimedia library is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure...

FFmpeg 输入验证错误漏洞

FFmpeg is software developed by individual developers that performs recording, converting, and streaming functions for a wide range of audio and video formats. A buffer overflow vulnerability exists in FFmpeg where the size calculation in buildopengopkeypoints iterates over all entries in the loo...

CVE-2022-2566: Heap-based Buffer Overflow

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

FFmpeg dict.c Heap Buffer Overflow DoS

The vulnerability of the avdictset function in the dict.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service failure...

FFmpeg Heap Buffer Overflow DoS

The vulnerability of the ffframepoolget function in the framepool.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service interruptions...

FFmpeg libavformat/aviobuf.c Heap Buffer Overflow DoS

The vulnerability of the urlopendynbufinternal function in the libavformat/aviobuf.c file of the FFmpeg multimedia library is related to improper memory release before deleting last references. Exploiting this vulnerability allows an attacker to cause service failures remotely...

FFmpeg Heap Buffer Overflow DoS

The vulnerability of the avcodecalloccontext3 function in the options.c file of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause a service failure...

FFmpeg buffersrc Heap Buffer Overflow DoS

The vulnerability of the avbuffersrcaddframeflags function in the buffersrc component of the FFmpeg multimedia library is related to improper memory release before deleting the last pointer. Exploiting this vulnerability allows an attacker to cause service failure remotely...

ffmpeg:ffmpeg_AV_CODEC_ID_TRUEHD_fuzzer: Heap-buffer-overflow in ff_mlp_pack_output

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4644322217164800 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTRUEHDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

Remote Code Execution

ffmpeg is vulnerable to remote code execution. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount leading to an integer overflow resulting in a small allocation with avcalloc, which allows an attacker to upload a...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in ljpeg_decode_rgb_scan

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6625593415827456 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x6250000021...

Exploit for SQL Injection in Zabbix

This is a comprehensive and well-structured vulnerability hub repository. Here's a concise analysis of the provided information: Classification: It is an offensive tool for various vulnerability exploitation and testing purposes. CVE IDs: The repository contains references to several CVE IDs,...

ffmpeg:ffmpeg_dem_MOV_fuzzer: Index-out-of-bounds in av_aes_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5968304170205184 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMOVfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in p8idct

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6576158459691008 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

PT-2022-6631

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 5.1.2 Description The issue is related to the use of memory after it has been freed in the libavcodec/pthread frame.c component of the FFmpeg multimedia library when handling worker threads with the hwaccel decoder. Th...