Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10092-1 Rating: important References: 1202075 Cross-References: CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10086-1 Rating: important References: 1202075 Cross-References: CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in ff_put_pixels_clamped_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4748914632294400 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

ffmpeg:ffmpeg_dem_MOV_fuzzer: Index-out-of-bounds in av_aes_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5339113284304896 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMOVfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

OESA-2022-1808 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: trackheader in...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in ff_put_pixels_clamped_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6153490086363136 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

USN-5472-1: FFmpeg vulnerabilities | Cloud Foundry

usn-5472-1 Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that FFmpeg would attempt to divide by zero when using Linear Predictive Coding LPC or AAC codecs. An attacker could possibly use this issue to cause a denial of service. This...

PT-2022-7203

Name of the Vulnerable Software and Affected Versions FFMPEG versions 5.1 and later Description A heap out-of-bounds memory write exists in the build open gop key points function due to an integer overflow. This occurs when the size calculation adds sc-ctts datai.count to sc-sample offsets count,...

ffmpeg-sdk vulnerable to OS Command Injection

A command injection vulnerability affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js...

GHSA-RWVF-C3WM-QM6W ffmpeg-sdk vulnerable to OS Command Injection

A command injection vulnerability affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js...

CVE-2020-28435

This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js...

Sql injection

This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js...

CVE-2020-28435 Command Injection

This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js...

CVE-2020-28435

The CVE-2020-28435 entry affects all versions of the Node.js package ffmpeg-sdk . The root cause is a command injection vulnerability in the injection point at line 9 in index.js (function execute), allowing arbitrary commands to be executed. In the reported PoC, an attacker calls root.execute("t...

CVE-2020-28435

This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js...

ffmpeg-sdk 命令注入漏洞

ffmpeg-sdk is a ffmpeg wrapper for nodejs by the individual developer Shajan Jacob in India. A security vulnerability exists in ffmpeg-sdk, which stems from the vulnerability of index.js to command injection attacks...

CVE-2020-28435: Improper Neutralization of Special Elements used in a Command

This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js...

PT-2022-8891

Name of the Vulnerable Software and Affected Versions ffmpeg-sdk versions all versions Description A command injection issue affects the package. The injection point is located in line 9 in index.js. Recommendations For all versions, consider disabling or restricting access to the vulnerable code...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in ljpeg_decode_rgb_scan

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5208501080686592 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x61700000030...

PT-2022-6681 · FFmpeg +6 · Ffmpeg +6

Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: A null pointer dereference issue was discovered in the decode main header function of the libavformat/nutdec.c file. The flaw occurs because the function lacks a check of the return value of...