FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A security vulnerability exists in FFmpeg version 2.0, which originates from a memory corruption via the decodeframe function in the libavcodec/ansi.c file...

FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg decodesliceheader function, which can be exploited by an attacker to trigger an out-of-bounds read memory access...

FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg decodevolheader function, which can be exploited by an attacker to cause a denial of service attack...

FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg decodehextile function, which can be exploited by an attacker to cause a denial of service attack...

PT-2022-7767

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A problematic issue has been found in the function intra pred of the file libavcodec/hevcpred template.c. This issue leads to memory corruption and can be exploited remotely. Recommendations For FFmpeg version 2....

PT-2022-7766

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A problematic issue has been found in the function output frame of the file libavcodec/h264.c, leading to memory corruption. The attack may be launched remotely. Recommendations To fix this issue, it is recommend...

PT-2022-7765

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A problematic issue was found in FFmpeg, affecting the decode vol header function of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption and can be initiated remotely. Recommendations...

PT-2022-7764

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A vulnerability has been found in FFmpeg, affecting the decode hextile function of the file libavcodec/vmnc.c. This issue leads to memory corruption and can be initiated remotely. Recommendations For FFmpeg versi...

PT-2022-7763

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A vulnerability was found in FFmpeg and classified as problematic. This issue affects the function get siz of the file libavcodec/jpeg2000dec.c. The manipulation leads to memory corruption. The attack may be...

PT-2022-7769

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A problematic issue has been found in FFmpeg, affecting the add yblock function of the libavcodec/snow.h file. This manipulation leads to memory corruption and can be initiated remotely. Recommendations For FFmpe...

PT-2022-7774

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A vulnerability was found in the HEVC Video Decoder component, leading to memory corruption when manipulated. The attack can be launched remotely. Recommendations For FFmpeg version 2.0, it is recommended to appl...

CVE-2014-125002: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function dnxhdinitrc of the file libavcodec/dnxhdenc.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue...

CVE-2014-125013: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrledecodeframe of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue...

USN-5167-1: FFmpeg vulnerabilities

It was discovered that FFmpeg did not properly verify certain input when processing video and audio files. An attacker could possibly use this to send specially crafted input to the application, force a division by zero, and cause a denial of service application crash. CVE-2020-20445,...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in avg_qpel16_mc01_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5745039940124672 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMPEG4fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7f28ab09b8...

ffmpeg:ffmpeg_AV_CODEC_ID_BINK_fuzzer: Heap-buffer-overflow in scale_block_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6194020855971840 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDBINKfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x6210000089...

ffmpeg:ffmpeg_IO_DEMUXER_fuzzer: Heap-buffer-overflow in mov_read_iloc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5706852010164224 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegIODEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60a000000200...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : FFmpeg vulnerabilities (USN-5472-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5472-1 advisory. It was discovered that FFmpeg would attempt to divide by zero when using Linear Predictive Coding LPC or AAC codecs. An attacker...

Ubuntu: Security Advisory (USN-5472-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5472-1: FFmpeg vulnerabilities

It was discovered that FFmpeg would attempt to divide by zero when using Linear Predictive Coding LPC or AAC codecs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 21.10. CVE-2020-20445, CVE-2020-20446...