FFmpeg 信息泄露漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. FFmpeg is vulnerable to an information disclosure. No detailed vulnerability details are available at this time...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

DEBIAN-CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

Design/Logic Flaw

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

UBUNTU-CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

CVE-2021-38114

CVE-2021-38114 affects FFmpeg 4.4’s libavcodec/dnxhddec.c, where the init_vlc() function’s return value is not checked, potentially leading to an unspecified impact (Debian and CNVD references describe it as a broader FFmpeg vulnerability with possible denial of service/out-of-bounds effects). Af...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. ffmpeg has an out-of-bounds read/write vulnerability in version 4.4 summary, which originates from FFmpeg's libavcodec dnxhddec.c not checking the return value of the init vlc function,...

CVE-2021-38114: Unchecked Return Value

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

PT-2021-4571

Name of the Vulnerable Software and Affected Versions FFmpeg versions 4.4 Description The issue is related to the libavcodec/dnxhddec.c component of the FFmpeg multimedia library, where the return value of the init vlc function is not properly checked. This could allow a remote attacker to cause ...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-use-after-free in partition_score

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6282788033658880 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

vulhub

This is an open-source collection of vulnerable web applications and environments for testing and learning about web application security. It is a project maintained by phith0n and hosted on GitHub. The repository contains a variety of applications and environments, including CouchDB, FFmpeg, Git...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6690357503983616 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_H264_fuzzer: Heap-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6357946765279232 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...