Lucene search
+L

10960 matches found

osv_debian
osv_debian
•added 2021/08/21 5:15 p.m.•7 views

DEBIAN-CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS7.4AI score0.02411EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/08/21 5:15 p.m.•36 views

CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS6.5AI score
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2021/08/21 5:15 p.m.•17 views

UBUNTU-CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS7.4AI score0.02411EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2021/08/21 5:15 p.m.•39 views

CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS7.4AI score0.02411EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2021/08/21 5:15 p.m.•23 views

CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS7.4AI score0.02411EPSS
SaveExploits0References8
Prion
Prion
•added 2021/08/21 5:15 p.m.•31 views

Design/Logic Flaw

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

7.5CVSS9.1AI score0.02411EPSS
SaveExploits0References6Affected Software2
Debian CVE
Debian CVE
•added 2021/08/21 12:00 a.m.•40 views

CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS7.4AI score0.02411EPSS
SaveExploits0
Mend
Mend
•added 2021/08/21 12:00 a.m.•6 views

CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS0.02411EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/21 12:00 a.m.•8 views

CVE-2021-38171: Unchecked Return Value

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS8AI score0.02411EPSS
SaveExploits0References2
CVE
CVE
•added 2021/08/21 12:00 a.m.•210 views

CVE-2021-38171

CVE-2021-38171 affects FFmpeg 4.4 and is described as adts_decode_extradata in libavformat/adtsenc.c not checking the return value of init_get_bits; the second argument to init_get_bits can be crafted. The connected documents confirm this as the root cause, noting that a crafted input could explo...

9.8CVSS7.4AI score0.02411EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2021/08/21 12:00 a.m.•87 views

CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.5AI score0.02411EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2021/08/21 12:00 a.m.•128 views

CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS7.4AI score0.02411EPSS
SaveExploits0
Veracode
Veracode
•added 2021/08/16 6:55 a.m.•29 views

Arbitrary Code Execution

ffmpeg is vulnerable to arbitrary code execution. A heap-based buffer overflow vulnerability in libavcodec/getbits.h when writing .mov files allows an attacker to execute arbitrary code on the host OS...

8.8CVSS4.2AI score0.01605EPSS
SaveExploits1References4Affected Software3
Veracode
Veracode
•added 2021/08/16 3:53 a.m.•27 views

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. Lack of return value check in libavcodec/dnxhddec.c in the initvlc function allows an attacker to cause a denial of service condition in the application...

5.5CVSS3.9AI score0.01031EPSS
SaveExploits0References7Affected Software3
OpenVAS
OpenVAS
•added 2021/08/16 12:00 a.m.•41 views

Debian: Security Advisory (DLA-2742-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.8AI score0.03567EPSS
SaveExploits12References4
Gitee
Gitee
•added 2021/08/15 11:58 p.m.•44 views

Exploit for Improper Encoding or Escaping of Output in F5 Nginx

This is an open-source collection of vulnerable web applications and environments for security testing and education. The repository is maintained by phith0n and is available on GitHub. It contains a variety of vulnerable applications, including web servers, databases, and other systems, to help...

9.8CVSS7.2AI score0.99679EPSS
SaveExploits64
Debian
Debian
•added 2021/08/15 4:58 a.m.•283 views

[SECURITY] [DLA 2742-1] ffmpeg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2742-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky August 14, 2021 https://wiki.debian.org/LTS -...

8.8CVSS7.2AI score0.03567EPSS
SaveExploits12
OSS-Fuzz
OSS-Fuzz
•added 2021/08/15 1:53 a.m.•8 views

ffmpeg:ffmpeg_AV_CODEC_ID_ARGO_fuzzer: Heap-buffer-overflow in decode_mad1_24

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5877046382297088 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDARGOfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x7fa6a5752c...

5.9AI score
SaveExploits0
osv_dla
osv_dla
•added 2021/08/14 12:00 a.m.•42 views

DLA-2742-1 ffmpeg - security update

Bulletin has no description...

8.8CVSS6.6AI score0.03567EPSS
SaveExploits12
osv_cve
osv_cve
•added 2021/08/12 4:15 p.m.•36 views

CVE-2021-38291

FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 suffers from a an assertion failure at src/libavutil/mathematics.c...

7.5CVSS6.6AI score
SaveExploits0References5
Rows per page
Query Builder